mariadb | Snyk

Direct Vulnerabilities

Known vulnerabilities in the mariadb package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L OS Command Injection	<11.4.12-r0
L OS Command Injection	<11.4.12-r0
L Incorrect Authorization	<11.4.11-r0
L Incorrect Authorization	<11.4.11-r0
L SQL Injection	<11.4.11-r0
L Directory Traversal	<11.4.11-r0
L OS Command Injection	<11.4.11-r0
L OS Command Injection	<11.4.11-r0
L CVE-2026-3494	<11.4.10-r0
H Reachable Assertion	<10.6.9-r0
H Use After Free	<10.6.9-r0
H Use After Free	<10.6.8-r0
H CVE-2022-27452	<10.6.8-r0
H SQL Injection	<10.6.8-r0
H SQL Injection	<10.6.8-r0
H SQL Injection	<10.6.8-r0
H SQL Injection	<10.6.8-r0
H CVE-2022-32084	<10.6.9-r0
H CVE-2022-27446	<10.6.8-r0
H CVE-2022-32089	<10.6.9-r0
H Reachable Assertion	<10.6.8-r0
H Use After Free	<10.6.9-r0
H Out-of-bounds Write	<10.6.9-r0
H SQL Injection	<10.6.8-r0
H SQL Injection	<10.6.7-r0
M CVE-2025-21490	<11.4.5-r0
H Use After Free	<10.6.8-r0
H SQL Injection	<10.6.8-r0
H Use After Free	<10.6.8-r0
H Use After Free	<10.6.8-r0
H CVE-2022-27451	<10.6.8-r0
H CVE-2022-27449	<10.6.8-r0
H Reachable Assertion	<10.6.8-r0
H Use After Free	<10.6.8-r0
M Resource Exhaustion	<10.6.7-r0
M CVE-2021-46661	<10.6.7-r0
M Improper Locking	<10.6.7-r0
M CVE-2021-46665	<10.6.7-r0
H CVE-2022-27445	<10.6.8-r0
H Use After Free	<10.6.8-r0
M CVE-2020-14789	<10.5.8-r0
M CVE-2020-14765	<10.5.8-r0
H CVE-2022-27444	<10.6.8-r0
H Use After Free	<10.6.8-r0
H Buffer Overflow	<10.6.8-r0
M Improper Locking	<10.6.7-r0
H Use After Free	<10.6.8-r0
M CVE-2021-46662	<10.6.7-r0
M CVE-2020-14776	<10.5.8-r0
M CVE-2019-2737	<10.4.7-r0
M CVE-2020-14812	<10.5.8-r0
H Use After Free	<10.6.7-r0
M CVE-2021-46659	<10.6.7-r0
H Stack-based Buffer Overflow	<10.6.7-r0
M CVE-2020-2574	<10.4.12-r0
M CVE-2021-2372	<10.6.4-r0
M CVE-2020-2812	<10.4.13-r0
M NULL Pointer Dereference	<10.6.7-r0
H Heap-based Buffer Overflow	<10.6.7-r0
M Integer Overflow or Wraparound	<10.6.7-r0
M CVE-2018-3251	<10.3.11-r0
M Improper Locking	<10.6.7-r0
H Use of Externally-Controlled Format String	<10.6.7-r0
M CVE-2018-3200	<10.3.11-r0
M CVE-2018-3162	<10.3.11-r0
M CVE-2021-2389	<10.6.4-r0
M CVE-2019-2938	<10.4.10-r0
M CVE-2019-2974	<10.4.10-r0
M CVE-2018-3174	<10.3.11-r0
H OS Command Injection	<10.5.9-r0
C Improper Input Validation	<10.5.6-r0
M CVE-2021-46663	<10.6.7-r0
M Improper Locking	<10.6.7-r0
M CVE-2018-2766	<10.2.15-r0
M CVE-2018-3277	<10.3.11-r0
M CVE-2021-2166	<10.5.11-r0
M CVE-2021-2154	<10.5.11-r0
M CVE-2019-2805	<10.4.7-r0
M CVE-2019-2758	<10.4.7-r0
M CVE-2019-2740	<10.4.7-r0
M CVE-2018-3143	<10.3.11-r0
M CVE-2018-3173	<10.3.11-r0
C Numeric Errors	<10.3.11-r0
M CVE-2020-2752	<10.4.13-r0
M CVE-2019-2739	<10.4.7-r0
M CVE-2018-2787	<10.2.15-r0
M CVE-2018-2810	<10.2.15-r0
M CVE-2018-2761	<10.2.15-r0
M CVE-2020-2760	<10.4.13-r0
M CVE-2018-2817	<10.2.15-r0
M CVE-2019-2627	<10.3.15-r0
M CVE-2018-2813	<10.2.15-r0
M CVE-2020-2814	<10.4.13-r0
M CVE-2019-2614	<10.3.15-r0
M CVE-2019-2537	<10.3.13-r0
M CVE-2019-2628	<10.3.15-r0
M CVE-2018-2786	<10.2.15-r0
M CVE-2019-2510	<10.3.13-r0
H CVE-2018-2755	<10.2.15-r0
M CVE-2018-3282	<10.3.11-r0
M CVE-2018-2759	<10.2.15-r0
M CVE-2024-21096	<10.11.8-r0
M CVE-2018-3156	<10.3.11-r0
M CVE-2018-3185	<10.3.11-r0
M CVE-2018-3284	<10.3.11-r0
M CVE-2018-2784	<10.2.15-r0
H Link Following	<10.1.21-r0
M CVE-2017-3238	<10.1.21-r0
M CVE-2018-2781	<10.2.15-r0
M CVE-2018-2782	<10.2.15-r0
M CVE-2017-3317	<10.1.21-r0
M CVE-2018-2777	<10.2.15-r0
M CVE-2018-2819	<10.2.15-r0
M CVE-2023-22084	<10.11.6-r0
M Improper Input Validation	<10.1.21-r0
M CVE-2017-3291	<10.1.21-r0
M CVE-2018-2771	<10.2.15-r0
M CVE-2017-3244	<10.1.21-r0
M Information Exposure	<10.1.22-r0
H Use After Free	<10.1.22-r0
M CVE-2017-3318	<10.1.21-r0
M CVE-2017-3243	<10.1.21-r0
M CVE-2017-3265	<10.1.21-r0
M CVE-2017-3312	<10.1.21-r0
M Improper Privilege Management	<10.1.21-r0

Vulnerability

Vulnerable Version

OS Command Injection

<11.4.12-r0