Zafiyetler / CVE-2026-44172

kritik

CVE-2026-44172

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

Yayın Değişiklik CWE 89
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Red Hat9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Bitnami. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Amazon (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Ubuntu (orta).

Açıklama

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
bitnami::Bitnami Vulnerability Databasemariadb, mariadb-min, mysql-client10.4.34 ve 2 tane daha
alma 10mariadb-connector-c, mariadb-connector-c-config, mariadb-connector-c-devel ve 2 tane daha3.4.4-2.el10_2
alma 8mariadb-connector-c, mariadb-connector-c-config, mariadb-connector-c-devel3.1.11-3.el8_10
alma 9mariadb-connector-c, mariadb-connector-c-config, mariadb-connector-c-devel ve 2 tane daha3.2.6-2.el9_8
alpine 3.20mariadb10.11.17-r0
alpine 3.21mariadb11.4.11-r0
alpine 3.22mariadb11.4.11-r0
alpine 3.23mariadb11.4.11-r0
alpine 3.24mariadb11.8.7-r0
alpine edgemariadb11.8.7-r0
amazon linux 2023mariadb-connector-c, mariadb-connector-c-config, mariadb-connector-c-debuginfo ve 64 tane daha3.3.10-1.amzn2023.0.2 ve 2 tane daha
debian 12mariadb1:10.11.18-0+deb12u1
39 kaynaktaki 201 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
bitnami::Bitnami Vulnerability Databasemariadb10.4.34
bitnami::Bitnami Vulnerability Databasemariadb-min10.6.23
bitnami::Bitnami Vulnerability Databasemysql-client10.6.17
alma 10mariadb-connector-c3.4.4-2.el10_2
alma 10mariadb-connector-c-config3.4.4-2.el10_2
alma 10mariadb-connector-c-devel3.4.4-2.el10_2
alma 10mariadb-connector-c-doc3.4.4-2.el10_2
alma 10mariadb-connector-c-test3.4.4-2.el10_2
alma 8mariadb-connector-c3.1.11-3.el8_10
alma 8mariadb-connector-c-config3.1.11-3.el8_10
alma 8mariadb-connector-c-devel3.1.11-3.el8_10
alma 9mariadb-connector-c3.2.6-2.el9_8
alma 9mariadb-connector-c-config3.2.6-2.el9_8
alma 9mariadb-connector-c-devel3.2.6-2.el9_8
alma 9mariadb-connector-c-doc3.2.6-2.el9_8
alma 9mariadb-connector-c-test3.2.6-2.el9_8
alpine 3.20mariadb10.11.17-r0
alpine 3.21mariadb11.4.11-r0
alpine 3.22mariadb11.4.11-r0
alpine 3.23mariadb11.4.11-r0
alpine 3.24mariadb11.8.7-r0
alpine edgemariadb11.8.7-r0
amazon linux 2023mariadb-connector-c3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-config3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-debuginfo3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-debugsource3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-devel3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-devel-debuginfo3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-doc3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-test3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb-connector-c-test-debuginfo3.3.10-1.amzn2023.0.2
amazon linux 2023mariadb10113:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-backup3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-backup-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-client-utils3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-common3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-connect-engine3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-connect-engine-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-cracklib-password-check3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-cracklib-password-check-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-debugsource3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-devel3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-errmsg3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-gssapi-server3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-gssapi-server-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-oqgraph-engine3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-oqgraph-engine-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-pam3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-pam-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-rocksdb-engine3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-rocksdb-engine-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-server3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-server-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-server-utils3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-server-utils-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-sphinx-engine3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-sphinx-engine-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-test3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1011-test-debuginfo3:10.11.18-1.amzn2023.0.1
amazon linux 2023mariadb1143:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-backup3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-backup-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-client-utils3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-common3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-connect-engine3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-connect-engine-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-cracklib-password-check3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-cracklib-password-check-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-debugsource3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-devel3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-errmsg3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-gssapi-server3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-gssapi-server-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-oqgraph-engine3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-oqgraph-engine-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-pam3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-pam-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-rocksdb-engine3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-rocksdb-engine-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-server3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-server-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-server-utils3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-server-utils-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-sphinx-engine3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-sphinx-engine-debuginfo3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-test3:11.4.12-1.amzn2023.0.1
amazon linux 2023mariadb114-test-debuginfo3:11.4.12-1.amzn2023.0.1
debian 12mariadb1:10.11.18-0+deb12u1
debian 13mariadbdüzeltme belirtilmemiş
debian 14mariadb1:11.8.8-1
echomariadb1:10.11.18-0+deb12u1
Oracle Linux 8mariadb-connector-c3.1.11-3.el8_10
Oracle Linux 8mariadb-connector-c-config3.1.11-3.el8_10
Oracle Linux 8mariadb-connector-c-devel3.1.11-3.el8_10
Oracle Linux 9mariadb-connector-c3.2.6-2.el9_8
Oracle Linux 9mariadb-connector-c-config3.2.6-2.el9_8
Oracle Linux 9mariadb-connector-c-devel3.2.6-2.el9_8
Oracle Linux 9mariadb-connector-c-doc3.2.6-2.el9_8
Oracle Linux 9mariadb-connector-c-test3.2.6-2.el9_8
rapidfort alma 10mariadb-connector-c0:3.4.4-1.el10_0.1, 0:3.4.4-2.el10_2
rapidfort alma 10mariadb-connector-c-config0:3.4.4-1.el10_0.1, 0:3.4.4-2.el10_2
rapidfort alma 10mariadb-connector-c-devel0:3.4.4-1.el10_0.1, 3.4.4-2.el10_2
rapidfort alma 10mariadb-connector-c-doc0:3.4.4-1.el10_0.1, 3.4.4-2.el10_2
rapidfort alma 10mariadb-connector-c-test0:3.4.4-1.el10_0.1, 3.4.4-2.el10_2
rapidfort alma 9mariadb-connector-c0:3.2.6-1.el9_2.1, 0:3.2.6-2.el9_8
rapidfort alma 9mariadb-connector-c-config0:3.2.6-1.el9_2.1, 0:3.2.6-2.el9_8
rapidfort alma 9mariadb-connector-c-devel0:3.2.6-1.el9_2.1, 3.2.6-2.el9_8
rapidfort alpine 3.20mariadb10.11.17-r0, 11.4.11-r0, 11.4.8-r0
rapidfort alpine 3.21mariadb11.4.11-r0, 11.4.8-r0
rapidfort alpine 3.22mariadb11.4.11-r0, 11.4.8-r0
rapidfort alpine 3.23mariadb11.4.11-r0, 11.4.8-r0
rapidfort alpine 3.24mariadb11.4.11-r0
rapidfort amazon linux 2023mariadb-connector-c3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb-connector-c-config3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb-connector-c-devel3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb-connector-c-doc3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb-connector-c-test3.3.10-1.amzn2023.0.2
rapidfort amazon linux 2023mariadb10113:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-backup3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-client-utils3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-common3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-connect-engine3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-cracklib-password-check3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-devel3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-errmsg3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-gssapi-server3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-oqgraph-engine3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-pam3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-rocksdb-engine3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-server3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-server-utils3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-sphinx-engine3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb1011-test3:10.11.18-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb105düzeltme belirtilmemiş
rapidfort amazon linux 2023mariadb1143:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-backup3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-client-utils3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-common3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-connect-engine3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-cracklib-password-check3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-devel3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-errmsg3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-gssapi-server3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-oqgraph-engine3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-pam3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-rocksdb-engine3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-server3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-server-utils3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-sphinx-engine3:11.4.12-1.amzn2023.0.1
rapidfort amazon linux 2023mariadb114-test3:11.4.12-1.amzn2023.0.1
rapidfort debian 12mariadb1:11.8.8-1
rapidfort debian 12rf-mariadb1:11.4.7+maria~ubu2404
rapidfort debian 13mariadb1:11.8.8-1
rapidfort debian 13rf-mariadb1:11.4.7+maria~ubu2404
rapidfort fedora 43mariadb10.113:10.11.18-2.fc43
rapidfort fedora 43mariadb11.83:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-backup3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-client-utils3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-common3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-connect-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-cracklib-password-check3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-devel3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-embedded3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-embedded-devel3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-errmsg3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-gssapi-server3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-oqgraph-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-pam3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-rocksdb-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-s3-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-server3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-server-galera3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-server-utils3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-sphinx-engine3:11.8.8-1.fc43
rapidfort fedora 43mariadb11.8-test3:11.8.8-1.fc43
rapidfort Oracle Linux 10mariadb-connector-c0:3.4.4-2.el10_2
rapidfort Oracle Linux 10mariadb-connector-c-config0:3.4.4-2.el10_2
rapidfort Oracle Linux 10mariadb-connector-c-devel0:3.4.4-2.el10_2
rapidfort Oracle Linux 9mariadb-connector-c0:3.2.6-2.el9_8
rapidfort Oracle Linux 9mariadb-connector-c-config0:3.2.6-2.el9_8
rapidfort Oracle Linux 9mariadb-connector-c-devel0:3.2.6-2.el9_8
rapidfort rocky 9mariadb-connector-c0:3.2.6-2.el9_8
rapidfort rocky 9mariadb-connector-c-devel0:3.2.6-2.el9_8
rapidfort ubuntu 20.04mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 20.04rf-mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 22.04mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 22.04rf-mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 24.04mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rapidfort ubuntu 24.04rf-mariadb1:11.8.6-5ubuntu0.1, 1:11.8.8-1
rocky 10mariadb-connector-c3.4.4-2.el10_2
rocky 10mariadb-connector-c-config3.4.4-2.el10_2
rocky 8mariadb-connector-c3.1.11-3.el8_10
rocky 8mariadb-connector-c-config3.1.11-3.el8_10
rocky 8mariadb-connector-c-devel3.1.11-3.el8_10
rocky 9mariadb-connector-c3.2.6-2.el9_8
rocky 9mariadb-connector-c-config3.2.6-2.el9_8
rocky 9mariadb-connector-c-devel3.2.6-2.el9_8
ubuntu 22.04mariadb-10.6düzeltme belirtilmemiş
ubuntu 26.04mariadb1:11.8.6-5ubuntu0.1

Referanslar

26 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.