CVE-2024-27766 Code injection in n/a
A remote attacker can execute arbitrary code via the lib_mysqludf_sys.so function in MariaDB, though the vendor disputes the severity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-27766?
CVE-2024-27766 is a medium-severity code injection vulnerability in Mariadb Mariadb, published on 17 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Weakness: CWE-94
Which versions are affected by CVE-2024-27766?
3 open source packages ship an affected version, including mariadb, mariadb-min and mysql-client. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
mariadb Bitnami | From 11.1.0 | 11.1.5 |
mariadb-min Bitnami | From 11.1.0 | 11.4.8 |
mysql-client Bitnami | From 11.1.0 | 11.3.2 |
Products include Mariadb Mariadb.
How do I fix CVE-2024-27766?
Upgrade mariadb to 11.1.5 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2024-27766 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-27766 exists.
Public exploit code: 2 proofs of concept on GitHub.
Other vulnerabilities in Mariadb Mariadb
- CVE-2026-49261 MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`
- CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
- CVE-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
- CVE-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
- CVE-2023-26785 Code injection in n/a
Sources
Also known as BIT-mariadb-2024-27766, BIT-mariadb-min-2024-27766, BIT-mysql-client-2024-27766, GHSA-v9vv-8xcq-rpqg, UBUNTU-CVE-2024-27766.