🎯 New Report #3788482: Stack Buffer Overflow in mariadb-dump quote name() Allows Malicious Server to Execute Arbitrary Code on Client
🔺Severity: Critical
👽 Reporter: byteoverride
⭐️ Reputation: 210
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-06-08
⏰ Disclosed: 2026-09-08 13:30:27
📝 Summary: A stack buffer overflow was discovered in the quote name() function of the mariadb-dump client application. The overflow occurred due to a lack of length validation on table names returned by a malicious MySQL server. This allowed a server to provide an excessively long table name that would overflow the fixed-size buffer, leading to the overwriting of the return address and other control-flow data on the stack. The vulnerability was confirmed to provide full control of the instruction pointer and several general-purpose registers, enabling remote code execution against any mariadb-dump client that connected to the malicious server.
📂 Report JSON File: 3788482
@hackeronereports