CVE-2026-107817
Fixed in a distro release EPSS <1%CVSS 4.4
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data could cause out-of-bounds reads, information disclosure, or a server crash. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Products: MariaDB server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | mariadb1011 | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-backup | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-client-utils | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-common | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-connect-engine | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-cracklib-password-check | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-devel | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-errmsg | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-gssapi-server | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-oqgraph-engine | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-pam | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-rocksdb-engine | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-server | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-server-utils | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-sphinx-engine | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-test | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114 | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-backup | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-client-utils | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-common | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-connect-engine | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-cracklib-password-check | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-devel | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-errmsg | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-gssapi-server | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-oqgraph-engine | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-pam | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-rocksdb-engine | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-server | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-server-utils | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-sphinx-engine | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-test | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118 | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-backup | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-client-utils | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-common | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-connect-engine | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-cracklib-password-check | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-devel | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-errmsg | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-gssapi-server | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-oqgraph-engine | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-pam | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-rocksdb-engine | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-server | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-server-utils | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-sphinx-engine | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-test | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123 | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-backup | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-client-utils | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-common | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-connect-engine | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-cracklib-password-check | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-devel | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-errmsg | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-gssapi-server | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-oqgraph-engine | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-pam | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-rocksdb-engine | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-server | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-server-utils | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-sphinx-engine | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-test | 3:12.3.3-2.amzn2023.0.1 |
| Debian 12 | mariadb | no fix |
| Debian 13 | mariadb | no fix |
| Debian 14 | mariadb | 1:11.8.9+ds-1 |
| Red Hat hummingbird 1 | mariadb10.11 | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-backup | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-client-utils | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-common | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-connect-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-cracklib-password-check | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-devel | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-embedded | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-embedded-devel | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-errmsg | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-gssapi-server | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-oqgraph-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-pam | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-rocksdb-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-s3-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server-galera | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server-utils | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-sphinx-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-test | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8 | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-backup | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-client-utils | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-common | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-connect-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-cracklib-password-check | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-devel | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-duckdb-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-embedded | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-embedded-devel | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-errmsg | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-gssapi-server | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-oqgraph-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-pam | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-rocksdb-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-s3-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-server | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-server-galera | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-server-utils | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-sphinx-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-test | 0:11.8.9-0.1.hum1 |
| Ubuntu 16.04 LTS | mariadb-10.0 | no fix |
| Ubuntu 18.04 LTS | mariadb-10.1 | no fix |
| Ubuntu 20.04 LTS | mariadb-10.3 | no fix |
| Ubuntu 22.04 LTS | mariadb-10.6 | no fix |
| Ubuntu 24.04 LTS | mariadb | no fix |
| Ubuntu 26.04 LTS | mariadb | no fix |
| Ubuntu 26.10 | mariadb | no fix |
| openSUSE Tumbleweed | mariadb | 12.3.2-3.1 |