Red Hat Security Advisory: mariadb-connector-c security update
The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fix(es): * mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
CVE-2026-44172 is a high-severity vulnerability affecting Red Hat Hardened Images RPMs, particularly the mariadb-connector-c packages. It is categorized as CWE-89, which corresponds to SQL Injection vulnerabilities. The Red Hat advisory RHSA-2026:30135 announces an update including mariadb-connector-c-3.4.9-1.hum1 and related packages for aarch64 and x86_64 architectures. The advisory does not explicitly state the fixed versions or detailed patch instructions but references the Red Hat images site for update application guidance. There are no known exploits in the wild associated with this vulnerability.
Potential Impact
The vulnerability is an SQL Injection (CWE-89) flaw in mariadb-connector-c RPMs used in Red Hat Hardened Images. Successful exploitation could allow an attacker to manipulate SQL queries, potentially leading to unauthorized data access or modification. The CVSS vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low impact on integrity, with no impact on confidentiality or availability. No known exploits have been reported in the wild.
Mitigation Recommendations
Red Hat has released updated RPM packages (mariadb-connector-c-3.4.9-1.hum1 and related) as part of a bug fix and enhancement update. Users of affected Red Hat Hardened Images should apply these updates following the guidance at https://images.redhat.com/. Patch status is not explicitly confirmed in the advisory text; therefore, users should consult the vendor advisory for current remediation instructions. No additional mitigation actions are specified by the vendor.
Red Hat Security Advisory: mariadb-connector-c security update
Description
The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fix(es): * mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS v4.0
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-44172 is a high-severity vulnerability affecting Red Hat Hardened Images RPMs, particularly the mariadb-connector-c packages. It is categorized as CWE-89, which corresponds to SQL Injection vulnerabilities. The Red Hat advisory RHSA-2026:30135 announces an update including mariadb-connector-c-3.4.9-1.hum1 and related packages for aarch64 and x86_64 architectures. The advisory does not explicitly state the fixed versions or detailed patch instructions but references the Red Hat images site for update application guidance. There are no known exploits in the wild associated with this vulnerability.
Potential Impact
The vulnerability is an SQL Injection (CWE-89) flaw in mariadb-connector-c RPMs used in Red Hat Hardened Images. Successful exploitation could allow an attacker to manipulate SQL queries, potentially leading to unauthorized data access or modification. The CVSS vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low impact on integrity, with no impact on confidentiality or availability. No known exploits have been reported in the wild.
Mitigation Recommendations
Red Hat has released updated RPM packages (mariadb-connector-c-3.4.9-1.hum1 and related) as part of a bug fix and enhancement update. Users of affected Red Hat Hardened Images should apply these updates following the guidance at https://images.redhat.com/. Patch status is not explicitly confirmed in the advisory text; therefore, users should consult the vendor advisory for current remediation instructions. No additional mitigation actions are specified by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:30135
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a50ba8668715ace435817e9
Added to database: 07/10/2026, 09:25:26 UTC
Last enriched: 07/19/2026, 20:40:19 UTC
Last updated: 07/23/2026, 00:47:11 UTC
Views: 46
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.