6.9
Medium
CVE-2026-44172 MariaDB server is a community developed fork of MySQL server
Description
MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| server | 3.4.8 | No fix stated |
| server | 3.3.18 | No fix stated |
| Red Hat Hardened Images | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published |
References
- github.com github.com
- jira.mariadb.org jira.mariadb.org
Timeline
- Published
- Last modified
Other CVEs of server
The 27 CVEs of server →
CVE-2026-102523
MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION
8.0
High
CVE-2026-86047
MariaDB server is a community developed fork of MySQL server
7.7
High
CVE-2026-85745
MariaDB server is a community developed fork of MySQL server
4.3
Medium
CVE-2026-85748
MariaDB server is a community developed fork of MySQL server
9.9
Critical