CVE-2024-27766
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the Mari...
Original description
The description as published by the source.
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Affected packages
Bitnami
mariadb-min
[{"type":"SEMVER","events":[{"introduced":"11.1.0"},{"fixed":"11.4.8"}]}]
Bitnami
mysql-client
[{"type":"SEMVER","events":[{"introduced":"11.1.0"},{"fixed":"11.3.2"}]}]
Bitnami
mariadb
[{"type":"SEMVER","events":[{"introduced":"11.1.0"},{"fixed":"11.1.5"}]}]
References
- advisory github.com
- web nvd.nist.gov
- web seclists.org