CVE catalog

CVE-2025-13699

mariadb: CVE-2025-13699

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.52% · Oct 25, 2026

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmariadbsid1:11.8.9+ds-4fixed
Debianmariadbforky1:11.8.9+ds-2fixed
Debianmariadbtrixie1:11.8.6-0+deb13u1fixed
Debianmariadbbookworm1:10.11.18-0+deb12u1fixed
Debianmariadbbookworm-security1:10.11.19-0+deb12u1fixed
Ubuntumariadb-10.016.0410.0.20-0ubuntu0.15.04.1vulnerable
Ubuntumariadb-10.016.0410.0.22-0ubuntu1vulnerable
Ubuntumariadb-10.016.0410.0.23-1vulnerable
Ubuntumariadb-10.016.0410.0.23-2vulnerable
Ubuntumariadb-10.016.0410.0.24-7vulnerable
Ubuntumariadb-10.016.0410.0.25-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.27-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.28-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.29-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.31-0ubuntu0.16.04.2vulnerable
Ubuntumariadb-10.016.0410.0.33-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.34-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.36-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.38-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.118.0410.1.25-1vulnerable
Ubuntumariadb-10.118.041:10.1.29-6vulnerable
Ubuntumariadb-10.118.041:10.1.34-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.2vulnerable
Ubuntumariadb-10.118.041:10.1.40-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.41-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.43-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.44-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.47-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.48-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.17-1vulnerable
Ubuntumariadb-10.320.041:10.3.18-1vulnerable
Ubuntumariadb-10.320.041:10.3.19-1vulnerable
Ubuntumariadb-10.320.041:10.3.21-2vulnerable
Ubuntumariadb-10.320.041:10.3.22-1vulnerable
Ubuntumariadb-10.320.041:10.3.22-1ubuntu1vulnerable
Ubuntumariadb-10.320.041:10.3.25-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.29-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.30-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.31-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.32-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.34-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.37-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.38-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.39-0ubuntu0.20.04.2vulnerable
Ubuntumariadb-10.622.041:10.6.7-2ubuntu1vulnerable
Ubuntumariadb-10.622.041:10.6.7-2ubuntu1.1vulnerable
Ubuntumariadb-10.622.041:10.6.11-0ubuntu0.22.04.1vulnerable
Ubuntumariadb-10.622.041:10.6.12-0ubuntu0.22.04.1vulnerable
Ubuntumariadb-10.622.041:10.6.16-0ubuntu0.22.04.1vulnerable
Ubuntumariadb-10.622.041:10.6.18-0ubuntu0.22.04.1vulnerable
Ubuntumariadb-10.622.041:10.6.21-0ubuntu0.22.04.2vulnerable
Ubuntumariadb-10.622.041:10.6.22-0ubuntu0.22.04.1vulnerable
Ubuntumariadb-10.622.041:10.6.23-0ubuntu0.22.04.1vulnerable
Ubuntumariadb24.041:10.11.4-1vulnerable
Ubuntumariadb24.041:10.11.5-3vulnerable
Ubuntumariadb24.041:10.11.6-1vulnerable
Ubuntumariadb24.041:10.11.6-2vulnerable
Ubuntumariadb24.041:10.11.7-2ubuntu1vulnerable
Ubuntumariadb24.041:10.11.7-2ubuntu2vulnerable
Ubuntumariadb24.041:10.11.8-0ubuntu0.24.04.1vulnerable
Ubuntumariadb24.041:10.11.11-0ubuntu0.24.04.2vulnerable
Ubuntumariadb24.041:10.11.13-0ubuntu0.24.04.1vulnerable
Ubuntumariadb24.041:10.11.14-0ubuntu0.24.04.1vulnerable
Ubuntumariadb25.101:11.4.5-1vulnerable
Ubuntumariadb25.101:11.8.1-4vulnerable
Ubuntumariadb25.101:11.8.1-5ubuntu2vulnerable
Ubuntumariadb25.101:11.8.2-1ubuntu1vulnerable
Ubuntumariadb25.101:11.8.3-1vulnerable
Ubuntumariadb25.101:11.8.3-1build1vulnerable
Opensusemariadbleap 16.011.8.5-160000.1.1fixed
Susemariadblinux enterprise server 16.011.8.5-160000.1.1fixed
Susemariadblinux enterprise server for sap applications 16.011.8.5-160000.1.1fixed
Susemariadblinux enterprise high performance computing 15 sp4-espos10.6.24-150400.3.43.1fixed
Susemariadblinux enterprise high performance computing 15 sp4-ltss10.6.24-150400.3.43.1fixed
Susemariadblinux enterprise high performance computing 15 sp5-espos10.6.24-150400.3.43.1fixed
Susemariadblinux enterprise high performance computing 15 sp5-ltss10.6.24-150400.3.43.1fixed
Susemariadblinux enterprise server 15 sp4-ltss10.6.24-150400.3.43.1fixed
Susemariadblinux enterprise server 15 sp5-ltss10.6.24-150400.3.43.1fixed
Susemariadblinux enterprise server for sap applications 15 sp410.6.24-150400.3.43.1fixed
Susemariadblinux enterprise server for sap applications 15 sp510.6.24-150400.3.43.1fixed
Susemariadbmanager proxy lts 4.310.6.24-150400.3.43.1fixed
Susemariadbmanager server lts 4.310.6.24-150400.3.43.1fixed
Susemariadblinux enterprise server 12 sp5-ltss10.2.44-3.56.1fixed
Susemariadblinux enterprise server ltss extended security 12 sp510.2.44-3.56.1fixed
Susemariadblinux enterprise module for package hub 15 sp711.8.5-150700.3.9.1fixed
Susemariadblinux enterprise module for server applications 15 sp711.8.5-150700.3.9.1fixed
Susemariadblinux enterprise server 15 sp6-ltss10.11.15-150600.4.17.1fixed
Susemariadblinux enterprise server for sap applications 15 sp610.11.15-150600.4.17.1fixed
Opensusemariadbleap 15.610.11.15-150600.4.17.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmariadbsourcesid1:11.8.5-1not yet assignedNot reportedNot reported
Debianmariadbsourceforky1:11.8.5-1not yet assignedNot reportedNot reported
Debianmariadbsourcetrixie11.8.6-0+deb13u1not yet assignedNot reportedNot reported
Debianmariadbsourcebookworm1:10.11.18-0+deb12u1not yet assignedNot reportedNot reported
Opensusemariadbrpmleap 16.011.8.5-160000.1.1Not reportedOPENSUSE-SU-2025:20175-1Not reported
Susemariadbrpmlinux enterprise server 16.011.8.5-160000.1.1Not reportedSUSE-SU-2026:20018-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 16.011.8.5-160000.1.1Not reportedSUSE-SU-2026:20018-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15 sp4-espos10.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15 sp4-ltss10.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15 sp5-espos10.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15 sp5-ltss10.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmlinux enterprise server 15 sp4-ltss10.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmlinux enterprise server 15 sp5-ltss10.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 15 sp410.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 15 sp510.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmmanager proxy lts 4.310.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmmanager server lts 4.310.6.24-150400.3.43.1Not reportedSUSE-SU-2025:4493-1Not reported
Susemariadbrpmlinux enterprise server 12 sp5-ltss10.2.44-3.56.1Not reportedSUSE-SU-2025:4520-1Not reported
Susemariadbrpmlinux enterprise server ltss extended security 12 sp510.2.44-3.56.1Not reportedSUSE-SU-2025:4520-1Not reported
Susemariadbrpmlinux enterprise module for package hub 15 sp711.8.5-150700.3.9.1Not reportedSUSE-SU-2025:4438-1Not reported
Susemariadbrpmlinux enterprise module for server applications 15 sp711.8.5-150700.3.9.1Not reportedSUSE-SU-2025:4438-1Not reported
Susemariadbrpmlinux enterprise server 15 sp6-ltss10.11.15-150600.4.17.1Not reportedSUSE-SU-2025:4502-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 15 sp610.11.15-150600.4.17.1Not reportedSUSE-SU-2025:4502-1Not reported
Opensusemariadbrpmleap 15.610.11.15-150600.4.17.1Not reportedSUSE-SU-2025:4502-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · all · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · all · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

  • Source package: [mariadb]

    Details (2)
    • 1:10.11.18-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

    • 1:10.11.18-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:10.11.18-0+deb12u1

      dsa · mariadb · debian · bookworm; dsa · mariadb · debian · 12

Next results

Observed:

References