{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "MariaDB ist ein relationales Datenbanksystem, das anwendungskompatibel mit MySQL ist.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Sicherheitsvorkehrungen zu umgehen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3856 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3856.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3856 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3856"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107814"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107815"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107816"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107817"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107818"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107819"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107821"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107822"
    }, {
      "category" : "external",
      "summary" : "CVE Record vom 2026-10-11",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-107823"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:83108 vom 2026-10-14",
      "url" : "https://access.redhat.com/errata/RHSA-2026:83108"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:84701 vom 2026-10-19",
      "url" : "https://access.redhat.com/errata/RHSA-2026:84701"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:84689 vom 2026-10-19",
      "url" : "https://access.redhat.com/errata/RHSA-2026:84689"
    } ],
    "source_lang" : "en-US",
    "title" : "MariaDB: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-10-19T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-20T10:53:05.701+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3856",
      "initial_release_date" : "2026-10-11T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-11T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-10-14T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Neue Updates von Red Hat aufgenommen"
      }, {
        "date" : "2026-10-18T22:00:00.000+00:00",
        "number" : "3",
        "summary" : "Neue Updates von Red Hat aufgenommen"
      }, {
        "date" : "2026-10-19T22:00:00.000+00:00",
        "number" : "4",
        "summary" : "Neue Updates von Red Hat aufgenommen"
      } ],
      "status" : "final",
      "version" : "4"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<10.6.28",
          "product" : {
            "name" : "MariaDB MariaDB <10.6.28",
            "product_id" : "T060985"
          }
        }, {
          "category" : "product_version",
          "name" : "10.6.28",
          "product" : {
            "name" : "MariaDB MariaDB 10.6.28",
            "product_id" : "T060985-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mariadb:mariadb:10.6.28"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<10.11.19",
          "product" : {
            "name" : "MariaDB MariaDB <10.11.19",
            "product_id" : "T060986"
          }
        }, {
          "category" : "product_version",
          "name" : "10.11.19",
          "product" : {
            "name" : "MariaDB MariaDB 10.11.19",
            "product_id" : "T060986-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mariadb:mariadb:10.11.19"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<11.4.13",
          "product" : {
            "name" : "MariaDB MariaDB <11.4.13",
            "product_id" : "T060987"
          }
        }, {
          "category" : "product_version",
          "name" : "11.4.13",
          "product" : {
            "name" : "MariaDB MariaDB 11.4.13",
            "product_id" : "T060987-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mariadb:mariadb:11.4.13"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<11.8.9",
          "product" : {
            "name" : "MariaDB MariaDB <11.8.9",
            "product_id" : "T060988"
          }
        }, {
          "category" : "product_version",
          "name" : "11.8.9",
          "product" : {
            "name" : "MariaDB MariaDB 11.8.9",
            "product_id" : "T060988-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mariadb:mariadb:11.8.9"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<12.3.3",
          "product" : {
            "name" : "MariaDB MariaDB <12.3.3",
            "product_id" : "T060989"
          }
        }, {
          "category" : "product_version",
          "name" : "12.3.3",
          "product" : {
            "name" : "MariaDB MariaDB 12.3.3",
            "product_id" : "T060989-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mariadb:mariadb:12.3.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<13.0.2",
          "product" : {
            "name" : "MariaDB MariaDB <13.0.2",
            "product_id" : "T060990"
          }
        }, {
          "category" : "product_version",
          "name" : "13.0.2",
          "product" : {
            "name" : "MariaDB MariaDB 13.0.2",
            "product_id" : "T060990-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mariadb:mariadb:13.0.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "MariaDB"
      } ],
      "category" : "vendor",
      "name" : "MariaDB"
    }, {
      "branches" : [ {
        "category" : "product_name",
        "name" : "Red Hat Enterprise Linux",
        "product" : {
          "name" : "Red Hat Enterprise Linux",
          "product_id" : "67646",
          "product_identification_helper" : {
            "cpe" : "cpe:/o:redhat:enterprise_linux:-"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-107814",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107814"
  }, {
    "cve" : "CVE-2026-107815",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107815"
  }, {
    "cve" : "CVE-2026-107816",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107816"
  }, {
    "cve" : "CVE-2026-107817",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107817"
  }, {
    "cve" : "CVE-2026-107818",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107818"
  }, {
    "cve" : "CVE-2026-107819",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107819"
  }, {
    "cve" : "CVE-2026-107821",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107821"
  }, {
    "cve" : "CVE-2026-107822",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107822"
  }, {
    "cve" : "CVE-2026-107823",
    "product_status" : {
      "known_affected" : [ "T060988", "T060987", "T060986", "T060985", "67646", "T060989", "T060990" ]
    },
    "release_date" : "2026-10-11T22:00:00.000+00:00",
    "title" : "CVE-2026-107823"
  } ]
}