MariaDB 10.5.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mariadb:mariadb:10.5.0:*:*:*:*:*:*:*

part: a version: 10.5.0 update: *

VendorMariadb (7f603b14-ed39-5458-877b-2a349be64aa8)
ProductMariadb (f53ad24a-fa82-58e9-8aea-d11d98960d9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mariadb-server purl2cpe 2026-06-01 10:16:17.412957
pkg:deb/ubuntu/mariadb-server purl2cpe 2026-06-01 10:16:17.412958
pkg:docker/mariadb/mariadb-docker purl2cpe 2026-06-01 10:16:17.412959
pkg:docker/mariadb/server purl2cpe 2026-06-01 10:16:17.412961
pkg:github/mariadb/server purl2cpe 2026-06-01 10:16:17.412962
pkg:rpm/fedora/mariadb purl2cpe 2026-06-01 10:16:17.412963
pkg:rpm/opensuse/mariadb purl2cpe 2026-06-01 10:16:17.412965

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39593 vulnerable 2026-06-08 06:09:37.811573 Details available
Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Published: 2024-10-17T00:00:00.000Z
Updated: 2024-10-20T23:41:10.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26785 vulnerable 2026-06-08 05:57:40.346713 Details available
MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Published: 2024-10-17T00:00:00.000Z
Updated: 2024-10-20T23:39:53.553Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.