| Package | Affected versions | Patched versions |
|---|---|---|
| aurora mysql | = 3.11.0≥ 3.01.0, < 3.04.6≥ 3.05.1, ≤ 3.10.2≤ 2.12.5 | 3.04.6 |
| relational database service | ≥ 10.11.4, ≤ 10.11.15≥ 11.4.3, ≤ 11.4.9≥ 11.8.3, ≤ 11.8.5≥ 8.0.11, ≤ 8.0.44≥ 8.4.3, ≤ 8.4.7≤ 10.6.24≤ 5.7.44-rds.20251212 | |
| mariadb | ≥ 10.7.0, ≤ 10.11.15≥ 11.0.0, ≤ 11.4.9≥ 11.5.0, ≤ 11.8.5≤ 10.6.24 |
In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free