The version of MariaDB installed on the remote host is prior to 10.11.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.11.12 advisory.

  - Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported     versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Client. Successful attacks of this vulnerability can result in unauthorized access to critical data     or complete access to all MySQL Client accessible data as well as unauthorized update, insert or delete     access to some of MySQL Client accessible data. (CVE-2025-30722)

  - MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can     sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and     optimize_stage2. (CVE-2023-52969)

  - MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and     11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where. (CVE-2023-52970)

  - MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
    (CVE-2023-52971)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of     MySQL Server accessible data. (CVE-2025-30693)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MariaDB 10.11.0 < 10.11.12 Multiple Vulnerabilities

medium Nessus Plugin ID 235350

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Jan 26, 2026, 9:17 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:N") CVSS metrics ("CVSSv3 score" set to 6.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N") Plugin metadata Plugin Feed: 202601262117
Version 1.2 Jan 9, 2026, 4:08 PM New Plugin Feed: 202601091608
Version 1.1 May 6, 2025, 7:52 PM New Plugin Feed: 202505061952