Unrated severityNVD Advisory· Published Oct 17, 2024· Updated Oct 20, 2024
CVE-2023-26785
CVE-2023-26785
Description
MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Affected products
4- MariaDB/MariaDBdescription
- osv-coords3 versions
>= 10.5.0, <= 10.5.0+ 2 more
- (no CPE)range: >= 10.5.0, <= 10.5.0
- (no CPE)range: >= 10.5.0, <= 10.5.0
- (no CPE)range: >= 10.5.0, <= 10.5.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.