CyberRota Analysis
AI-GeneratedThe vulnerability affects MariaDB server versions 12.3.1 to 12.3.3 and 13.0.2, specifically in the handling of SYS_REFCURSOR, which can lead to a use-after-free condition. A low-privileged attacker can exploit this flaw by opening multiple cursors, potentially allowing for remote code execution when combined with another vulnerability. Database administrators and organizations using affected MariaDB versions should prioritize patching to mitigate this critical risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYS_REFCURSORs and then fetch one to trigger a use-after-free that can enable remote code execution when combined with another vulnerability. This issue is fixed in versions 12.3.3 and 13.0.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)