CVE-2023-39593
17.10.2024, 22:15
Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
| Vendor | Product | Version |
|---|---|---|
| mariadb | mariadb | 10.5.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mariadb |
| ||||||||||||
| mariadb-10.0 |
| ||||||||||||
| mariadb-10.1 |
| ||||||||||||
| mariadb-10.3 |
| ||||||||||||
| mariadb-10.6 |
| ||||||||||||
| mysql-5.5 |
| ||||||||||||
| mysql-5.7 |
| ||||||||||||
| mysql-8.0 |
| ||||||||||||
| percona-server-5.6 |
| ||||||||||||
| percona-xtradb-cluster-5.6 |
|