CVE-2024-27766
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the Mari...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Paquets affectés
Bitnami
mariadb-min
[{"type":"SEMVER","events":[{"introduced":"11.1.0"},{"fixed":"11.4.8"}]}]
Bitnami
mysql-client
[{"type":"SEMVER","events":[{"introduced":"11.1.0"},{"fixed":"11.3.2"}]}]
Bitnami
mariadb
[{"type":"SEMVER","events":[{"introduced":"11.1.0"},{"fixed":"11.1.5"}]}]
Références
- advisory github.com
- web nvd.nist.gov
- web seclists.org