Vulnerability-Lookup

ubuntu-cve-2024-27766

Vulnerability from osv_ubuntu

Published

2024-10-17 22:15

Modified

2026-04-22 07:48

Summary

Details

An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

Severity

5.7 (Medium)


                    
                      CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2024-27766	REPORT
	https://www.cve.org/CVERecord?id=CVE-2024-27766	REPORT
	https://github.com/Ant1sec-ops/CVE-2024-27766	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmysqlclient18",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "libmysqld-pic",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-source-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "mysql-5.5",
        "purl": "pkg:deb/ubuntu/mysql-5.5@5.5.62-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.5.32-0ubuntu7",
        "5.5.34-0ubuntu1",
        "5.5.34-0ubuntu2",
        "5.5.35-0ubuntu1",
        "5.5.35+dfsg-1ubuntu1",
        "5.5.37-0ubuntu0.14.04.1",
        "5.5.38-0ubuntu0.14.04.1",
        "5.5.40-0ubuntu0.14.04.1",
        "5.5.41-0ubuntu0.14.04.1",
        "5.5.43-0ubuntu0.14.04.1",
        "5.5.44-0ubuntu0.14.04.1",
        "5.5.46-0ubuntu0.14.04.2",
        "5.5.47-0ubuntu0.14.04.1",
        "5.5.49-0ubuntu0.14.04.1",
        "5.5.50-0ubuntu0.14.04.1",
        "5.5.52-0ubuntu0.14.04.1",
        "5.5.53-0ubuntu0.14.04.1",
        "5.5.54-0ubuntu0.14.04.1",
        "5.5.55-0ubuntu0.14.04.1",
        "5.5.57-0ubuntu0.14.04.1",
        "5.5.58-0ubuntu0.14.04.1",
        "5.5.59-0ubuntu0.14.04.1",
        "5.5.60-0ubuntu0.14.04.1",
        "5.5.61-0ubuntu0.14.04.1",
        "5.5.62-0ubuntu0.14.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmysqlclient20",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-client-5.7",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-client-core-5.7",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-server-5.7",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-server-core-5.7",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-source-5.7",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-testsuite-5.7",
            "binary_version": "5.7.44-0ubuntu0.16.04.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "mysql-5.7",
        "purl": "pkg:deb/ubuntu/mysql-5.7@5.7.44-0ubuntu0.16.04.1+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.7.11-0ubuntu4",
        "5.7.11-0ubuntu5",
        "5.7.11-0ubuntu6",
        "5.7.12-0ubuntu1",
        "5.7.12-0ubuntu1.1",
        "5.7.13-0ubuntu0.16.04.2",
        "5.7.15-0ubuntu0.16.04.1",
        "5.7.16-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.2",
        "5.7.18-0ubuntu0.16.04.1",
        "5.7.19-0ubuntu0.16.04.1",
        "5.7.20-0ubuntu0.16.04.1",
        "5.7.21-0ubuntu0.16.04.1",
        "5.7.22-0ubuntu0.16.04.1",
        "5.7.23-0ubuntu0.16.04.1",
        "5.7.24-0ubuntu0.16.04.1",
        "5.7.25-0ubuntu0.16.04.2",
        "5.7.26-0ubuntu0.16.04.1",
        "5.7.27-0ubuntu0.16.04.1",
        "5.7.28-0ubuntu0.16.04.2",
        "5.7.29-0ubuntu0.16.04.1",
        "5.7.30-0ubuntu0.16.04.1",
        "5.7.31-0ubuntu0.16.04.1",
        "5.7.32-0ubuntu0.16.04.1",
        "5.7.33-0ubuntu0.16.04.1",
        "5.7.35-0ubuntu0.16.04.1+esm1",
        "5.7.36-0ubuntu0.16.04.1+esm1",
        "5.7.37-0ubuntu0.16.04.1+esm1",
        "5.7.38-0ubuntu0.16.04.1+esm1",
        "5.7.39-0ubuntu0.16.04.1+esm2",
        "5.7.40-0ubuntu0.16.04.1+esm1",
        "5.7.41-0ubuntu0.16.04.1+esm1",
        "5.7.42-0ubuntu0.16.04.1+esm1",
        "5.7.43-0ubuntu0.16.04.1+esm1",
        "5.7.44-0ubuntu0.16.04.1+esm1"
      ]
    }
  ],
  "aliases": [],
  "details": "An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.",
  "id": "UBUNTU-CVE-2024-27766",
  "modified": "2026-04-22T07:48:46Z",
  "published": "2024-10-17T22:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-27766"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27766"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/Ant1sec-ops/CVE-2024-27766"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2024-27766"
  ]
}

CVE-2024-27766 (GCVE-0-2024-27766)

Vulnerability from cvelistv5 – Published: 2024-10-17 00:00 – Updated: 2024-10-20 23:34 Disputed

Summary

Severity

5.7 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

n/a
CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

mitre

References

2 references

URL	Tags
https://github.com/Ant1sec-ops/CVE-2024-27766
https://seclists.org/fulldisclosure/2012/Dec/39

Impacted products

1 product

Vendor	Product	Version
mariadb	mariadb	Affected: 11.1 cpe:2.3:a:mariadb:mariadb:-:::::node.js::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mariadb:mariadb:-:*:*:*:*:node.js:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mariadb",
            "vendor": "mariadb",
            "versions": [
              {
                "status": "affected",
                "version": "11.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "LOW",
              "baseScore": 5.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-27766",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-18T17:02:26.922682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-18T17:10:51.712Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-20T23:34:58.910Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/Ant1sec-ops/CVE-2024-27766"
        },
        {
          "url": "https://seclists.org/fulldisclosure/2012/Dec/39"
        }
      ],
      "tags": [
        "disputed"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-27766",
    "datePublished": "2024-10-17T00:00:00.000Z",
    "dateReserved": "2024-02-26T00:00:00.000Z",
    "dateUpdated": "2024-10-20T23:34:58.910Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

ubuntu-cve-2024-27766

Vulnerability from osv_ubuntu

CVE-2024-27766 (GCVE-0-2024-27766)

Tags

Sightings

Nomenclature