MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength() and ReadableByteBuf.readIntLengthEncodedNotNull() methods narrowed the protocol's unsigned 8-byte length-encoded integer to a Java int without checking that the value fit a non-negative integer. Values above Integer.MAX_VALUE could wrap to a negative or unrelated length that downstream allocation and read paths used. A malicious or compromised server, or a machine-in-the-middle attacker, could trigger NegativeArraySizeException, out-of-bounds failures, or oversized allocation behavior in client connection handling. This issue is fixed in versions 3.3.7, 3.4.5, and 3.5.10.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From
    3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength() and
    ReadableByteBuf.readIntLengthEncodedNotNull() methods narrowed the protocol's unsigned 8-byte length-
    encoded integer to a Java int without checking that the value fit a non-negative integer. Values above
    Integer.MAX_VALUE could wrap to a negative or unrelated length that downstream allocation and read paths
    used. A malicious or compromised server, or a machine-in-the-middle attacker, could trigger
    NegativeArraySizeException, out-of-bounds failures, or oversized allocation behavior in client connection
    handling. This issue is fixed in versions 3.3.7, 3.4.5, and 3.5.10. (CVE-2026-119279)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From     3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength() and     ReadableByteBuf.readIntLengthEncodedNotNull() methods narrowed the protocol's unsigned 8-byte length-     encoded integer to a Java int without checking that the value fit a non-negative integer. Values above     Integer.MAX_VALUE could wrap to a negative or unrelated length that downstream allocation and read paths     used. A malicious or compromised server, or a machine-in-the-middle attacker, could trigger     NegativeArraySizeException, out-of-bounds failures, or oversized allocation behavior in client connection     handling. This issue is fixed in versions 3.3.7, 3.4.5, and 3.5.10. (CVE-2026-119279)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478098	SCA: security update for org.mariadb.jdbc:mariadb-java-client (GHSA-797x-p4mc-jwpm)	Tenable Cloud Security	SCA Checks	Local	medium
478098	SCA: security update for org.mariadb.jdbc:mariadb-java-client (GHSA-797x-p4mc-jwpm)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
374243	Linux Distros Unpatched Vulnerability : CVE-2026-119279	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-119279

medium

Tenable Plugins

medium

medium

medium