PT-2026-29985 · Mariadb · Mariadb Server

Pavel Kohout · Published 2026-04-03 · Updated 2026-05-29 · CVE-2026-35549

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MariaDB Server versions prior to 11.4.10 MariaDB Server versions 11.5.0 through 11.8.5 MariaDB Server versions prior to 12.2.2

Description MariaDB Server is susceptible to a crash when using the caching sha2 password authentication plugin with certain user accounts. This occurs because the sha256 crypt r function utilizes alloca, and a large packet can trigger a server crash.

Recommendations Update MariaDB Server to version 11.4.10 or later. Update MariaDB Server to version 11.8.6 or later. Update MariaDB Server to version 12.2.2 or later.

Fix

Weakness Enumeration

CWE-789

Related Identifiers

CVE-2026-35549

OPENSUSE-SU-2026:10897-1

Affected Products

Mariadb Server

References · 21

• https://osv.dev/vulnerability/BELL-CVE-2026-35549 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-35549 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10897-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35549 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-35549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35549 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-35549 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-35549 · Vendor Advisory
• https://docs.bell-sw.com/security/cves/CVE-2026-35549 · Note
• https://reddit.com/r/mariadb/comments/1tmz805/caching_sha2_password_plugin_can_crash_your · Reddit Post
• https://suse.com/security/cve/CVE-2026-44170 · Note
• https://suse.com/security/cve/CVE-2026-44169 · Note
• https://suse.com/security/cve/CVE-2026-44168 · Note
• https://suse.com/security/cve/CVE-2026-35549 · Note
• https://twitter.com/CVEnew/status/2040128723958030545 · Twitter Post