🎯 New Report #3867358: MariaDB Low-Privilege User Can Exhaust Memory Through a Formatting Function and Crash the Service
🔺Severity: Medium
👽 Reporter: xlabai
⭐️ Reputation: 158
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-07-16
⏰ Disclosed: 2026-10-07 20:01:50
📝 Summary: A low-privilege database user was able to exhaust memory on a MariaDB server through the SFORMAT() function by specifying an extremely large width parameter. The function attempted to allocate nearly 2 GB of memory before generating the return value. Multiple concurrent requests caused the database process to be terminated by the system's out-of-memory mechanism, resulting in service unavailability. The vulnerability required only basic database login privileges and the ability to execute standard SELECT queries. No administrative access, table privileges, or user interaction was necessary to exploit this denial-of-service condition.
📂 Report JSON File: 3867358
@hackeronereports