CVE-2026-44172

EUVD-2026-36517
MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
mariadbmariadb
3.3.18
mariadbmariadb
3.4.8
redhatenterprise_linux
10.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
0:3.4.4-2.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
3.4.9-1.hum1 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
mariadb
bookworm
1:10.11.18-0+deb12u1
fixed
forky
1:11.8.8-1
fixed
sid
1:11.8.8-1
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mariadb
jammy
dne
noble
needs-triage
questing
ignored
resolute
Fixed 1:11.8.6-5ubuntu0.1
released
mariadb-10.0
jammy
dne
noble
dne
questing
dne
resolute
dne
mariadb-10.1
bionic
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
mariadb-10.3
focal
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
mariadb-10.6
jammy
needs-triage
noble
dne
questing
dne
resolute
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libmariadb-devel
suse enterprise sap 15 SP4
3.1.28-150000.3.39.1
fixed
suse enterprise sap 15 SP5
3.1.28-150000.3.39.1
fixed
suse enterprise sap 15 SP7
3.1.28-150600.18.3.1
fixed
suse enterprise server 12 SP5
3.1.28-2.38.1
fixed
suse enterprise server 15 SP4
3.1.28-150000.3.39.1
fixed
suse enterprise server 15 SP5
3.1.28-150000.3.39.1
fixed
suse enterprise server 15 SP6
3.1.28-150600.18.3.1
fixed
suse enterprise server 15 SP7
3.1.28-150600.18.3.1
fixed
libmariadb3
suse enterprise desktop 15 SP7
3.1.28-150600.18.3.1
fixed
suse enterprise sap 15 SP4
3.1.28-150000.3.39.1
fixed
suse enterprise sap 15 SP5
3.1.28-150000.3.39.1
fixed
suse enterprise sap 15 SP7
3.1.28-150600.18.3.1
fixed
suse enterprise server 12 SP5
3.1.28-2.38.1
fixed
suse enterprise server 15 SP4
3.1.28-150000.3.39.1
fixed
suse enterprise server 15 SP5
3.1.28-150000.3.39.1
fixed
suse enterprise server 15 SP6
3.1.28-150600.18.3.1
fixed
suse enterprise server 15 SP7
3.1.28-150600.18.3.1
fixed
libmariadb_plugins
suse enterprise sap 15 SP4
3.1.28-150000.3.39.1
fixed
suse enterprise sap 15 SP5
3.1.28-150000.3.39.1
fixed
suse enterprise sap 15 SP7
3.1.28-150600.18.3.1
fixed
suse enterprise server 12 SP5
3.1.28-2.38.1
fixed
suse enterprise server 15 SP4
3.1.28-150000.3.39.1
fixed
suse enterprise server 15 SP5
3.1.28-150000.3.39.1
fixed
suse enterprise server 15 SP6
3.1.28-150600.18.3.1
fixed
suse enterprise server 15 SP7
3.1.28-150600.18.3.1
fixed
libmariadbd-devel
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
libmariadbd19
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
libmariadbprivate
suse enterprise desktop 15 SP7
3.1.28-150600.18.3.1
fixed
suse enterprise sap 15 SP4
3.1.28-150000.3.39.1
fixed
suse enterprise sap 15 SP5
3.1.28-150000.3.39.1
fixed
suse enterprise sap 15 SP7
3.1.28-150600.18.3.1
fixed
suse enterprise server 15 SP4
3.1.28-150000.3.39.1
fixed
suse enterprise server 15 SP5
3.1.28-150000.3.39.1
fixed
suse enterprise server 15 SP6
3.1.28-150600.18.3.1
fixed
suse enterprise server 15 SP7
3.1.28-150600.18.3.1
fixed
mariadb
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-client
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-errormessages
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-tools
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
mariadb-connector-c
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb-connector-c-config
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb-connector-c-debuginfo
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb-connector-c-debugsource
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb-connector-c-devel
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb-connector-c-devel-debuginfo
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb-connector-c-doc
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb-connector-c-test
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb-connector-c-test-debuginfo
Amazon Linux 2023
0:3.3.10-1.amzn2023.0.2
fixed
mariadb1011
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-backup
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-backup-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-client-utils
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-common
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-connect-engine
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-connect-engine-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-cracklib-password-check
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-cracklib-password-check-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-debugsource
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-devel
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-errmsg
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-gssapi-server
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-gssapi-server-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-oqgraph-engine
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-oqgraph-engine-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-pam
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-pam-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-rocksdb-engine
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-rocksdb-engine-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-server
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-server-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-server-utils
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-server-utils-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-sphinx-engine
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-sphinx-engine-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-test
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-test-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb114
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-backup
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-backup-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-client-utils
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-common
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-connect-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-connect-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-cracklib-password-check
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-cracklib-password-check-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-debugsource
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-devel
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-errmsg
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-gssapi-server
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-gssapi-server-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-oqgraph-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-oqgraph-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-pam
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-pam-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-rocksdb-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-rocksdb-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-utils
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-utils-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-sphinx-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-sphinx-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-test
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-test-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://github.com/MariaDB/server/security/advisories/GHSA-pv9p-5w55-55jm
https://jira.mariadb.org/browse/CONC-819
https://access.redhat.com/errata/RHSA-2026:30135
https://access.redhat.com/errata/RHSA-2026:43505
https://access.redhat.com/security/cve/CVE-2026-44172
https://bugzilla.redhat.com/show_bug.cgi?id=2488459
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44172.json