Vulnerabilidades / CVE-2026-44172

crítica

CVE-2026-44172

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

Publicada Modificada CWE 89
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.

Severidad por fuente

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Red Hat9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Bitnami. Más baja según Red Hat (alta), AlmaLinux (alta), Amazon (alta), Oracle (alta), Rocky Linux (alta), Ubuntu (media).

Descripción

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

Paquetes afectados y versiones corregidas

FuentePaqueteCorregido en
bitnami::Bitnami Vulnerability Databasemariadb, mariadb-min, mysql-client10.4.34 y 2 más
alma 10mariadb-connector-c, mariadb-connector-c-config, mariadb-connector-c-devel y 2 más3.4.4-2.el10_2
alma 8mariadb-connector-c, mariadb-connector-c-config, mariadb-connector-c-devel3.1.11-3.el8_10
alma 9mariadb-connector-c, mariadb-connector-c-config, mariadb-connector-c-devel y 2 más3.2.6-2.el9_8
alpine 3.20mariadb10.11.17-r0
alpine 3.21mariadb11.4.11-r0
alpine 3.22mariadb11.4.11-r0
alpine 3.23mariadb11.4.11-r0
alpine 3.24mariadb11.8.7-r0
alpine edgemariadb11.8.7-r0
amazon linux 2023mariadb-connector-c, mariadb-connector-c-config, mariadb-connector-c-debuginfo y 64 más3.3.10-1.amzn2023.0.2 y 2 más
debian 12mariadb1:10.11.18-0+deb12u1
Mostrar las 201 entradas de 39 fuentes
FuentePaqueteCorregido en
bitnami::Bitnami Vulnerability Databasemariadb10.4.34
bitnami::Bitnami Vulnerability Databasemariadb-min10.6.23
bitnami::Bitnami Vulnerability Databasemysql-client10.6.17
alma 10mariadb-connector-c3.4.4-2.el10_2
alma 10mariadb-connector-c-config3.4.4-2.el10_2
alma 10mariadb-connector-c-devel3.4.4-2.el10_2
alma 10mariadb-connector-c-doc3.4.4-2.el10_2
alma 10mariadb-connector-c-test3.4.4-2.el10_2
alma 8mariadb-connector-c3.1.11-3.el8_10
alma 8mariadb-connector-c-config3.1.11-3.el8_10
alma 8mariadb-connector-c-devel3.1.11-3.el8_10
alma 9mariadb-connector-c3.2.6-2.el9_8
alma 9mariadb-connector-c-config3.2.6-2.el9_8
alma 9mariadb-connector-c-devel3.2.6-2.el9_8
alma 9mariadb-connector-c-doc3.2.6-2.el9_8
alma 9mariadb-connector-c-test3.2.6-2.el9_8
alpine 3.20mariadb10.11.17-r0
alpine 3.21mariadb11.4.11-r0
alpine 3.22mariadb11.4.11-r0
alpine 3.23mariadb11.4.11-r0
alpine 3.24mariadb11.8.7-r0
alpine edgemariadb11.8.7-r0
amazon linux 2023mariadb-connector-c3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-config3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-debuginfo3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-debugsource3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-devel3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-devel-debuginfo3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-doc3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-test3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-test-debuginfo3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb10113:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-backup3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-backup-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-client-utils3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-common3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-connect-engine3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-connect-engine-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-cracklib-password-check3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-cracklib-password-check-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-debugsource3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-devel3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-errmsg3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-gssapi-server3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-gssapi-server-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-oqgraph-engine3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-oqgraph-engine-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-pam3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-pam-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-rocksdb-engine3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-rocksdb-engine-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-server3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-server-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-server-utils3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-server-utils-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-sphinx-engine3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-sphinx-engine-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-test3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-test-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1143:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-backup3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-backup-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-client-utils3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-common3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-connect-engine3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-connect-engine-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-cracklib-password-check3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-cracklib-password-check-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-debugsource3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-devel3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-errmsg3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-gssapi-server3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-gssapi-server-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-oqgraph-engine3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-oqgraph-engine-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-pam3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-pam-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-rocksdb-engine3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-rocksdb-engine-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-server3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-server-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-server-utils3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-server-utils-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-sphinx-engine3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-sphinx-engine-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-test3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-test-debuginfo3:11.4.12-1.amzn2023.0.1
debian 12mariadb1:10.11.18-0+deb12u1
debian 13mariadbsin corrección indicada
debian 14mariadb1:11.8.8-1
echomariadb1:10.11.18-0+deb12u1
Oracle Linux 8mariadb-connector-c3.1.11-3.el8_10
Oracle Linux 8mariadb-connector-c-config3.1.11-3.el8_10
Oracle Linux 8mariadb-connector-c-devel3.1.11-3.el8_10
Oracle Linux 9mariadb-connector-c3.2.6-2.el9_8
Oracle Linux 9mariadb-connector-c-config3.2.6-2.el9_8
Oracle Linux 9mariadb-connector-c-devel3.2.6-2.el9_8
Oracle Linux 9mariadb-connector-c-doc3.2.6-2.el9_8
Oracle Linux 9mariadb-connector-c-test3.2.6-2.el9_8
rapidfort alma 10mariadb-connector-c0:3.4.4-1.el10_0.1, 0:3.4.4-2.el10_2
rapidfort alma 10mariadb-connector-c-config0:3.4.4-1.el10_0.1, 0:3.4.4-2.el10_2
rapidfort alma 10mariadb-connector-c-devel0:3.4.4-1.el10_0.1, 3.4.4-2.el10_2
rapidfort alma 10mariadb-connector-c-doc0:3.4.4-1.el10_0.1, 3.4.4-2.el10_2
rapidfort alma 10mariadb-connector-c-test0:3.4.4-1.el10_0.1, 3.4.4-2.el10_2
rapidfort alma 9mariadb-connector-c0:3.2.6-1.el9_2.1, 0:3.2.6-2.el9_8
rapidfort alma 9mariadb-connector-c-config0:3.2.6-1.el9_2.1, 0:3.2.6-2.el9_8
rapidfort alma 9mariadb-connector-c-devel0:3.2.6-1.el9_2.1, 3.2.6-2.el9_8
rapidfort alpine 3.20mariadb10.11.17-r0, 11.4.11-r0, 11.4.8-r0
rapidfort alpine 3.21mariadb11.4.11-r0, 11.4.8-r0
rapidfort alpine 3.22mariadb11.4.11-r0, 11.4.8-r0
rapidfort alpine 3.23mariadb11.4.11-r0, 11.4.8-r0
rapidfort alpine 3.24mariadb11.4.11-r0
rapidfort amazon linux 2023mariadb-connector-c3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb-connector-c-config3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb-connector-c-devel3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb-connector-c-doc3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb-connector-c-test3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb10113:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-backup3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-client-utils3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-common3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-connect-engine3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-cracklib-password-check3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-devel3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-errmsg3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-gssapi-server3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-oqgraph-engine3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-pam3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-rocksdb-engine3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-server3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-server-utils3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-sphinx-engine3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-test3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb105sin corrección indicada
rapidfort amazon linux 2023mariadb1143:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-backup3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-client-utils3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-common3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-connect-engine3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-cracklib-password-check3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-devel3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-errmsg3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-gssapi-server3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-oqgraph-engine3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-pam3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-rocksdb-engine3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-server3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-server-utils3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-sphinx-engine3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-test3:11.4.12-1.amzn2023.0.1
rapidfort debian 12mariadb1:11.8.8-1
rapidfort debian 12rf-mariadb1:11.4.7+maria~ubu2404
rapidfort debian 13mariadb1:11.8.8-1
rapidfort debian 13rf-mariadb1:11.4.7+maria~ubu2404
rapidfort fedora 43mariadb10.113:10.11.18-2.fc43
rapidfort fedora 43mariadb11.83:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-backup3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-client-utils3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-common3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-connect-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-cracklib-password-check3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-devel3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-embedded3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-embedded-devel3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-errmsg3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-gssapi-server3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-oqgraph-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-pam3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-rocksdb-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-s3-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-server3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-server-galera3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-server-utils3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-sphinx-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-test3:11.8.8-1.fc43
rapidfort Oracle Linux 10mariadb-connector-c0:3.4.4-2.el10_2
rapidfort Oracle Linux 10mariadb-connector-c-config0:3.4.4-2.el10_2
rapidfort Oracle Linux 10mariadb-connector-c-devel0:3.4.4-2.el10_2
rapidfort Oracle Linux 9mariadb-connector-c0:3.2.6-2.el9_8
rapidfort Oracle Linux 9mariadb-connector-c-config0:3.2.6-2.el9_8
rapidfort Oracle Linux 9mariadb-connector-c-devel0:3.2.6-2.el9_8
rapidfort rocky 9mariadb-connector-c0:3.2.6-2.el9_8
rapidfort rocky 9mariadb-connector-c-devel0:3.2.6-2.el9_8
rapidfort ubuntu 20.04mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 20.04rf-mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 22.04mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 22.04rf-mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 24.04mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 24.04rf-mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rocky 10mariadb-connector-c3.4.4-2.el10_2
rocky 10mariadb-connector-c-config3.4.4-2.el10_2
rocky 8mariadb-connector-c3.1.11-3.el8_10
rocky 8mariadb-connector-c-config3.1.11-3.el8_10
rocky 8mariadb-connector-c-devel3.1.11-3.el8_10
rocky 9mariadb-connector-c3.2.6-2.el9_8
rocky 9mariadb-connector-c-config3.2.6-2.el9_8
rocky 9mariadb-connector-c-devel3.2.6-2.el9_8
ubuntu 22.04mariadb-10.6sin corrección indicada
ubuntu 26.04mariadb1:11.8.6-5ubuntu0.1

Referencias

Las 26 referencias

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.