CVE-2026-44169

EUVD-2026-36515
MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
mariadbmariadb
11.4.1 ≤
𝑥
< 11.4.11
mariadbmariadb
11.8.1 ≤
𝑥
< 11.8.7
mariadbmariadb
12.3.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mariadb
bookworm
postponed
forky
1:11.8.8-1
fixed
sid
1:11.8.8-1
fixed
trixie
no-dsa
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libmariadbd-devel
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
libmariadbd19
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-client
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-errormessages
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-tools
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
mariadb114
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-backup
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-backup-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-client-utils
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-common
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-connect-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-connect-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-cracklib-password-check
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-cracklib-password-check-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-debugsource
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-devel
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-errmsg
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-gssapi-server
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-gssapi-server-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-oqgraph-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-oqgraph-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-pam
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-pam-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-rocksdb-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-rocksdb-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-utils
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-utils-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-sphinx-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-sphinx-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-test
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-test-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2
https://jira.mariadb.org/browse/MDEV-39288