MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.
{
"binaries": [
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "libmariadbd18"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-client"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-client-10.0"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-client-core-10.0"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-common"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-plugin-connect"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-plugin-mroonga"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-plugin-oqgraph"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-plugin-spider"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-plugin-tokudb"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-server"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-server-10.0"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-server-core-10.0"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-test"
},
{
"binary_version": "10.0.38-0ubuntu0.16.04.1",
"binary_name": "mariadb-test-data"
}
]
}{
"binaries": [
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "libmariadbclient-dev-compat"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "libmariadbclient18"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "libmariadbd18"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-client"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-client-10.1"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-client-core-10.1"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-common"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-plugin-connect"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-plugin-cracklib-password-check"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-plugin-gssapi-client"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-plugin-gssapi-server"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-plugin-mroonga"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-plugin-oqgraph"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-plugin-spider"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-plugin-tokudb"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-server"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-server-10.1"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-server-core-10.1"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-test"
},
{
"binary_version": "1:10.1.48-0ubuntu0.18.04.1",
"binary_name": "mariadb-test-data"
}
]
}{
"binaries": [
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "libmariadb-dev-compat"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "libmariadb3"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "libmariadbd19"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-backup"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-client"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-client-10.3"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-client-core-10.3"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-common"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-connect"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-cracklib-password-check"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-gssapi-client"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-gssapi-server"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-mroonga"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-oqgraph"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-rocksdb"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-spider"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-plugin-tokudb"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-server"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-server-10.3"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-server-core-10.3"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-test"
},
{
"binary_version": "1:10.3.39-0ubuntu0.20.04.2",
"binary_name": "mariadb-test-data"
}
]
}{
"binaries": [
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "libmariadb-dev-compat"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "libmariadb3"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "libmariadbd19"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-backup"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-client"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-client-10.6"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-client-core-10.6"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-common"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-connect"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-cracklib-password-check"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-gssapi-client"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-gssapi-server"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-mroonga"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-oqgraph"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-rocksdb"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-s3"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-plugin-spider"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-server"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-server-10.6"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-server-core-10.6"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-test"
},
{
"binary_version": "1:10.6.23-0ubuntu0.22.04.1",
"binary_name": "mariadb-test-data"
}
]
}{
"binaries": [
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "libmariadb-dev-compat"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "libmariadb3"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "libmariadbd19t64"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-backup"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-client"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-client-core"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-common"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-connect"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-cracklib-password-check"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-gssapi-client"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-gssapi-server"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-hashicorp-key-management"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-mroonga"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-oqgraph"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-provider-bzip2"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-provider-lz4"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-provider-lzma"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-provider-lzo"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-provider-snappy"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-rocksdb"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-s3"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-plugin-spider"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-server"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-server-10.5"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-server-core"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-test"
},
{
"binary_version": "1:10.11.14-0ubuntu0.24.04.1",
"binary_name": "mariadb-test-data"
}
]
}{
"binaries": [
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "libmariadb-dev-compat"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "libmariadb3"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "libmariadbd19t64"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-backup"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-client"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-client-compat"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-client-core"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-common"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-connect"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-connect-jdbc"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-cracklib-password-check"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-gssapi-client"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-gssapi-server"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-hashicorp-key-management"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-mroonga"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-oqgraph"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-provider-bzip2"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-provider-lz4"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-provider-lzma"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-provider-lzo"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-provider-snappy"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-rocksdb"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-s3"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-plugin-spider"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-server"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-server-10.5"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-server-compat"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-server-core"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-test"
},
{
"binary_version": "1:11.8.3-1build1",
"binary_name": "mariadb-test-data"
}
]
}