MariaDB HandlerSocket Improper Request Field-Count Validation Causes Server Crash

拒绝服务 / 资源消耗失控 / #3867363

厂商

MariaDB

严重程度

低危

赏金

—

弱点

资源消耗失控

研究员

@xlabai

披露日期

2026-10-07

资产

MariaDB Server & Connectors - Denial of Service

CVE

—

该报告还没有中文解读。

Product link: https://github.com/MariaDB/server

fldnum = read_field_count_from_request();
flds = alloca(fldnum * sizeof(string_ref));
for each field:
    flds[i] = string_ref(field_pointer, field_length);