CVE-2025-13699: mariadb Path Traversal

CVSS: 7.0v3.0HighDeferred

AliasesSUSE-SU-2025:4438-1SUSE-SU-2025:4493-1SUSE-SU-2025:4502-1+24 more

Published 23-12-2025Last modified 24-12-2025

Vulnerability summary

CVE-2025-13699 is a high (CVSS 7.0) Path Traversal vulnerability in mariadb. EPSS estimates a 0.52% chance of exploitation in the next 30 days, higher than 42.9% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.0/10

010

High · v3.0 (CVE.org)

EPSS score

0.52%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 1

RHSA-2026:0136 RHSA-2026:0247 RHSA-2026:0334 RHSA-2026:0335 RHSA-2026:0376 SUSE-SU-2025:4491-1

Timeline

23-12-2025
PublishedVulnerability first disclosed.
24-12-2025
Last modifiedVulnerability information updated.

Description

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.

CVSS metrics

5 scores · 5 sources · 2 versions

v3.17.0v3.07.0

EPSS trend

Probability

0.52%

Chance of exploitation in the next 30 days

Percentile

43%

Versus all other CVEs

30-day change

+0.01 pp

From 0.51% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Redhat56 products

asio< 0:1.10.8-7.module+el8.9.0+19449+ad5852d3
asio-devel< 0:1.10.8-7.module+el8.9.0+19449+ad5852d3
galera< 0:25.3.37-1.module+el8.9.0+19449+ad5852d3 | < 0:26.4.20-1.module+el8.10.0+22586+3d7c2ef3 | < 0:26.4.22-1.module+el8.10.0+23546+c942e1d0 | < 0:26.4.14-1.module+el8.8.0+20134+a92c7654 | < 0:25.3.37-1.module+el8.8.0+19444+aac3c36b | < 0:25.3.35-1.module+el8.6.0+15949+4ba4ec26 | < 0:25.3.34-4.module+el8.4.0+15058+0c3d11c7 | < 0:26.4.14-1.module+el8.4.0+20291+fd32d29c | < 0:26.4.14-1.module+el8.6.0+20274+5db7ad9f | < 0:25.3.32-1.module+el8.2.0+10474+c7510d9c
galera-debuginfo< 0:25.3.37-1.module+el8.9.0+19449+ad5852d3 | < 0:26.4.20-1.module+el8.10.0+22586+3d7c2ef3 | < 0:26.4.22-1.module+el8.10.0+23546+c942e1d0 | < 0:26.4.14-1.module+el8.8.0+20134+a92c7654 | < 0:25.3.37-1.module+el8.8.0+19444+aac3c36b | < 0:25.3.35-1.module+el8.6.0+15949+4ba4ec26 | < 0:25.3.34-4.module+el8.4.0+15058+0c3d11c7 | < 0:26.4.14-1.module+el8.4.0+20291+fd32d29c | < 0:26.4.14-1.module+el8.6.0+20274+5db7ad9f | < 0:25.3.32-1.module+el8.2.0+10474+c7510d9c
galera-debugsource< 0:25.3.37-1.module+el8.9.0+19449+ad5852d3 | < 0:26.4.20-1.module+el8.10.0+22586+3d7c2ef3 | < 0:26.4.22-1.module+el8.10.0+23546+c942e1d0 | < 0:26.4.14-1.module+el8.8.0+20134+a92c7654 | < 0:25.3.37-1.module+el8.8.0+19444+aac3c36b | < 0:25.3.35-1.module+el8.6.0+15949+4ba4ec26 | < 0:25.3.34-4.module+el8.4.0+15058+0c3d11c7 | < 0:26.4.14-1.module+el8.4.0+20291+fd32d29c | < 0:26.4.14-1.module+el8.6.0+20274+5db7ad9f | < 0:25.3.32-1.module+el8.2.0+10474+c7510d9c

Judy< 0:1.0.5-18.module+el8.9.0+19449+ad5852d3 | < 0:1.0.5-18.module+el8.10.0+21221+7bee72c1 | < 0:1.0.5-18.module+el8.10.0+22630+cacda3f1 | < 0:1.0.5-18.module+el8.4.0+9031+9abc7af9 | < 0:1.0.5-18.module+el8+2765+cfa4f87b
Judy-debuginfo< 0:1.0.5-18.module+el8.9.0+19449+ad5852d3 | < 0:1.0.5-18.module+el8.10.0+21221+7bee72c1 | < 0:1.0.5-18.module+el8.10.0+22630+cacda3f1 | < 0:1.0.5-18.module+el8.4.0+9031+9abc7af9 | < 0:1.0.5-18.module+el8+2765+cfa4f87b
Judy-debugsource< 0:1.0.5-18.module+el8.9.0+19449+ad5852d3 | < 0:1.0.5-18.module+el8.10.0+21221+7bee72c1 | < 0:1.0.5-18.module+el8.10.0+22630+cacda3f1 | < 0:1.0.5-18.module+el8.4.0+9031+9abc7af9 | < 0:1.0.5-18.module+el8+2765+cfa4f87b
Judy-devel< 0:1.0.5-18.module+el8.9.0+19449+ad5852d3
mariadb< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f | < 1:5.5.68-1.el7_9.1
mariadb-backup< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-backup-debuginfo< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-bench< 1:5.5.68-1.el7_9.1
mariadb-common< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-debuginfo< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f | < 1:5.5.68-1.el7_9.1
mariadb-debugsource< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-devel< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f | < 1:5.5.68-1.el7_9.1
mariadb-embedded< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f | < 1:5.5.68-1.el7_9.1
mariadb-embedded-debuginfo< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-embedded-devel< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f | < 1:5.5.68-1.el7_9.1
mariadb-errmsg< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-gssapi-server< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-gssapi-server-debuginfo< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-libs< 1:5.5.68-1.el7_9.1
mariadb-oqgraph-engine< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-oqgraph-engine-debuginfo< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-pam< 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1
mariadb-pam-debuginfo< 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1
mariadb-server< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f | < 1:5.5.68-1.el7_9.1
mariadb-server-debuginfo< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-server-galera< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-server-utils< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-server-utils-debuginfo< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb-test< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f | < 1:5.5.68-1.el7_9.1
mariadb-test-debuginfo< 3:10.3.39-2.module+el8.10.0+23756+5eac0e54 | < 3:10.5.22-2.el9_4 | < 3:10.5.29-3.el9_6 | < 3:10.5.22-2.el9_2 | < 3:10.5.29-3.el9_7 | < 3:10.11.10-2.module+el8.10.0+23755+8858eb6a | < 3:10.5.29-3.module+el8.10.0+23752+7ef55629 | < 3:10.5.22-2.module+el8.8.0+23802+124431be | < 3:10.3.39-4.module+el8.8.0+23827+92695e7c | < 3:10.3.35-2.module+el8.6.0+23817+0c0bfeb4 | < 3:10.3.32-3.module+el8.4.0+23808+e07e6ffa | < 3:10.5.22-3.module+el8.4.0+23847+f2036569 | < 3:10.5.22-2.module+el8.6.0+23818+e40eb7e6 | < 3:10.5.22-1.el9_0.1 | < 3:10.3.28-2.module+el8.2.0+23809+9df5005f
mariadb10.11< 0:10.11.16-2.2.hum1
mariadb10.11-backup< 0:10.11.16-2.2.hum1
mariadb10.11-client-utils< 0:10.11.16-2.2.hum1
mariadb10.11-common< 0:10.11.16-2.2.hum1
mariadb10.11-connect-engine< 0:10.11.16-2.2.hum1
mariadb10.11-cracklib-password-check< 0:10.11.16-2.2.hum1
mariadb10.11-devel< 0:10.11.16-2.2.hum1
mariadb10.11-embedded< 0:10.11.16-2.2.hum1
mariadb10.11-embedded-devel< 0:10.11.16-2.2.hum1
mariadb10.11-errmsg< 0:10.11.16-2.2.hum1
mariadb10.11-gssapi-server< 0:10.11.16-2.2.hum1
mariadb10.11-oqgraph-engine< 0:10.11.16-2.2.hum1
mariadb10.11-pam< 0:10.11.16-2.2.hum1
mariadb10.11-rocksdb-engine< 0:10.11.16-2.2.hum1
mariadb10.11-s3-engine< 0:10.11.16-2.2.hum1
mariadb10.11-server< 0:10.11.16-2.2.hum1
mariadb10.11-server-galera< 0:10.11.16-2.2.hum1
mariadb10.11-server-utils< 0:10.11.16-2.2.hum1
mariadb10.11-sphinx-engine< 0:10.11.16-2.2.hum1
mariadb10.11-test< 0:10.11.16-2.2.hum1
mariadb11.8< 0:11.8.6-2.2.hum1

Show all 56

Suse18 products

mariadb&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 10.6.24-150400.3.43.1
mariadb&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 10.6.24-150400.3.43.1
mariadb&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 10.6.24-150400.3.43.1
mariadb&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 10.6.24-150400.3.43.1
mariadb&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 11.8.5-150700.3.9.1

Show all 18

Ubuntu5 products

mariadbAll versions (No fix recorded)
mariadb-10.0All versions (No fix recorded)
mariadb-10.1All versions (No fix recorded)
mariadb-10.3All versions (No fix recorded)
mariadb-10.6All versions (No fix recorded)

Opensuse2 products

mariadb&distro=openSUSE Leap 15.6< 10.11.15-150600.4.17.1
mariadb&distro=openSUSE Leap 16.0< 11.8.5-160000.1.1

Debian1 product

mariadb< 1:10.11.18-0+deb12u1 | < 11.8.6-0+deb13u1 | < 1:11.8.5-1

Mariadb1 product

mariadb11.8.3

6 vendors · 83 products

References

63 links

www.zerodayinitiative.com/advisories/ZDI-25-1025/X Research AdvisoryREPORT
jira.mariadb.org/browse/MDEV-37483Vendor AdvisoryREPORT
www.suse.com/support/update/announcement/2025/suse-su-20254438-1/Advisory
bugzilla.suse.com/1252162REPORT
bugzilla.suse.com/1254313REPORT
www.suse.com/security/cve/CVE-2025-13699WEB
www.suse.com/support/update/announcement/2025/suse-su-20254493-1/Advisory
www.suse.com/support/update/announcement/2025/suse-su-20254502-1/Advisory
www.suse.com/support/update/announcement/2025/suse-su-20254520-1/Advisory
www.suse.com/support/update/announcement/2026/suse-su-202620018-1/Advisory

Show all 63 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities