2319552 – (CVE-2024-27766) CVE-2024-27766 mariadb: RCE via user defined function

Bug 2319552 (CVE-2024-27766) - CVE-2024-27766 mariadb: RCE via user defined function

Summary: CVE-2024-27766 mariadb: RCE via user defined function

Keywords:
Status:	NEW
Alias:	CVE-2024-27766
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Attachments	(Terms of Use)

Description OSIDB Bzimport 2024-10-17 22:01:20 UTC

An issue in MYSQL MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function.

Note You need to log in before you can comment on or make changes to this bug.