products / mariadb

MariaDB

MariaDB is a community-developed fork of MySQL, maintained by the MariaDB Foundation and vendors. NVD tracks it as mariadb:mariadb with semver-style server versions.

api usage

Querying MariaDB

product slugmariadb

version format10.6.5, 11.4.2

bash

curl "https://api.attestd.io/v1/check?product=mariadb&version=10.6.5" \
  -H "Authorization: Bearer $ATTESTD_KEY"

MariaDB 10.6.5 is affected by CVE-2022-47015 (NULL dereference in Spider print_warnings causes denial of service). The response shows risk_state: "high".

json

{
  "product": "mariadb",
  "version": "10.6.5",
  "supported": true,
  "risk_state": "critical",
  "risk_factors": [
    "remote_code_execution",
    "no_authentication_required",
    "internet_exposed_service",
    "patch_available"
  ],
  "actively_exploited": false,
  "remote_exploitable": true,
  "authentication_required": false,
  "patch_available": true,
  "fixed_version": null,
  "confidence": 0.5,
  "cve_ids": [
    "CVE-2018-25032",
    "CVE-2021-46659",
    "CVE-2021-46661",
    "CVE-2021-46663",
    "CVE-2021-46664",
    "CVE-2021-46665",
    "CVE-2021-46668",
    "CVE-2021-46669",
    "CVE-2022-0778",
    "CVE-2022-21595",
    "CVE-2022-24048",
    "CVE-2022-24050",
    "CVE-2022-24051",
    "CVE-2022-24052",
    "CVE-2022-27376",
    "CVE-2022-27377",
    "CVE-2022-27378",
    "CVE-2022-27379",
    "CVE-2022-27380",
    "CVE-2022-27381",
    "CVE-2022-27382",
    "CVE-2022-27383",
    "CVE-2022-27384",
    "CVE-2022-27386",
    "CVE-2022-27387",
    "CVE-2022-27444",
    "CVE-2022-27445",
    "CVE-2022-27446",
    "CVE-2022-27447",
    "CVE-2022-27448",
    "CVE-2022-27449",
    "CVE-2022-27451",
    "CVE-2022-27452",
    "CVE-2022-27455",
    "CVE-2022-27456",
    "CVE-2022-27457",
    "CVE-2022-31622",
    "CVE-2022-31623",
    "CVE-2022-32081",
    "CVE-2022-32082",
    "CVE-2022-32083",
    "CVE-2022-32084",
    "CVE-2022-32085",
    "CVE-2022-32086",
    "CVE-2022-32087",
    "CVE-2022-32088",
    "CVE-2022-32089",
    "CVE-2022-32091",
    "CVE-2022-38791",
    "CVE-2022-47015",
    "CVE-2023-22084",
    "CVE-2023-5157",
    "CVE-2026-3494",
    "CVE-2026-35549",
    "CVE-2026-44168",
    "CVE-2026-44170",
    "CVE-2026-44171",
    "CVE-2026-44173",
    "CVE-2026-48163",
    "CVE-2026-48165",
    "CVE-2026-49261",
    "CVE-2026-6428",
    "CVE-2026-72607"
  ],
  "cves": null,
  "max_epss": 0.70561,
  "last_updated": "2026-08-16T11:18:08.825063Z",
  "supply_chain": {
    "compromised": false,
    "sources": [],
    "malware_type": null,
    "description": null,
    "advisory_url": null,
    "compromised_at": null,
    "removed_at": null,
    "source_published_at": null,
    "observed_at": null,
    "ingested_at": null,
    "first_served_at": null,
    "provenance": null
  },
  "supply_chain_monitored": true,
  "typosquat": null
}

safe version

MariaDB 11.8.2 is outside the affected ranges for CVE-2016-6662, CVE-2020-15180, and CVE-2022-47015 listed below.

bash

curl "https://api.attestd.io/v1/check?product=mariadb&version=11.8.8" \
  -H "Authorization: Bearer $ATTESTD_KEY"

notable cves

CVE history

MariaDB CVE history includes remote root escalation via config-file writes, Galera SST command injection, and denial of service in storage engines such as Spider.

CVE	Description	Affects	CVSS
`CVE-2016-6662`	Remote attackers create /var/lib/mysql config files and escalate to root.	<5.5.51 / 10.0/10.1 cuts	9.8
`CVE-2020-15180`	Unsanitized wsrep_sst_method injects commands on Galera cluster nodes.	10.1 to 10.5	9.0
`CVE-2022-47015`	NULL deref in Spider print_warnings DoSes the server.	10.3 to 10.9	6.5
`CVE-2021-46661`	MariaDB server crashes via crafted queries against certain storage engines.	10.2 to 10.6	4.9

All products MySQL PostgreSQL