🎯 New Report #3867363: MariaDB HandlerSocket Improper Request Field-Count Validation Causes Server Crash
🔺Severity: Medium
👽 Reporter: xlabai
⭐️ Reputation: 158
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-07-16
⏰ Disclosed: 2026-10-07 20:03:17
📝 Summary: A vulnerability was discovered in MariaDB Server's optional HandlerSocket plugin that allowed improper validation of request field-count parameters. When processing exec requests, the plugin allocated stack memory based on a client-supplied field count before validating whether the count was reasonable. An attacker could send requests with abnormally large field counts to cause the MariaDB process to crash, resulting in database service denial of service. The vulnerability affected deployments with HandlerSocket enabled, and could be exploited by unauthenticated attackers if no authentication secret was configured.
📂 Report JSON File: 3867363
@hackeronereports