CVE-2024-27766
No fix known EPSS 1%CVSS 5.7
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Products: MariaDB
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 14.04 LTS | mysql-5.5 | no fix |
| Ubuntu Pro 16.04 LTS | mysql-5.7 | no fix |