MariaDB 10.6.0 < 10.6.26/ 10.11.0 < 10.11.17/ 11.4.0 < 11.4.11/ 11.8.0 < 11.8.7/ 12.3.0 < 12.3.2

high Nessus Plugin ID 380756

Synopsis

The remote database server is affected by a vulnerability.

Description

The version of MariaDB installed on the remote host is prior to 10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2. It is, therefore, affected by a vulnerability as referenced in the GHSA-cp3h-jjxp-9pvr advisory.

- ### Impact GIS functions, such as `ST_NumPoints()`, `ST_NumGeometries()` and `ST_IsValid()`, did not verify that a LineString, MultiPoint, MultiLineString or MultiPolygon in WKB format was long enough to contain the number of elements. For a truncated WKB value they read 4 bytes beyond the end of the buffer, and `ST_NumPoints()` and `ST_NumGeometries()` returned these bytes to the user. ### Workarounds There is no workaround. ### References https://jira.mariadb.org/browse/MDEV-39279 ### Credits [Riley Scott Jacob](https://hackerone.com/riscj) (GHSA-cp3h-jjxp-9pvr)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to MariaDB version 10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2 or later.

Plugin Details

Severity: High

ID: 380756

File Name: mariadb_ghsa_cp3h_jjxp_9pvr_12_3_2.nasl

Version: 1.1

Type: Combined

Agent: windows, macosx, unix

Family: Databases

Published: 11/13/2026

Updated: 11/13/2026

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/a:mariadb:mariadb

Required KB Items: installed_sw/MariaDB

Exploit Ease: No known exploits are available

Patch Publication Date: 11/13/2026

Vulnerability Publication Date: 11/13/2026

Reference Information

CWE: 125

Detections

Analytics