STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

MariaDB products must be an enterprise version supported by the vendor.

DISA Rule

SV-265882r1193305_rule

Vulnerability Number

V-265882

Group Title

SRG-APP-000456-DB-000400

Rule Version

MADB-10-012600

Severity

CAT I

CCI(s)

• CCI-003376 - Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer.

Weight

10

Fix Recommendation

Remove or decommission all unsupported software products.

Upgrade unsupported DBMS or unsupported components to a supported version of the product.

Check Contents

Review the version and release information and check if a suitable enterprise edition is in use:

MariaDB> SELECT VARIABLE_NAME, VARIABLE_VALUE
FROM information_schema.GLOBAL_VARIABLES
WHERE VARIABLE_NAME IN ('version', 'version_comment', 'version_suffix');

Example output for Enterprise 10.6 would be:

+-----------------------------+
| 10.6.25-MariaDB-enterprise |
+-----------------------------+

In Enterprise, the version field itself will contain "-enterprise", and sometimes additional enterprise-specific variables/plugins appear (e.g., enterprise encryption or backup-related variables), but the version string is the definitive indicator. In Community, the version field is usually empty or generic and has no enterprise indicators.

Access the vendor website MariaDB Enterprise download page and check supported releases: https://mariadb.com/downloads/enterprise/enterprise-server/

Pick the corresponding operating system such as Ubuntu, Red Hat, Rocky, or another from drop-down list.

If MariaDB Community Software or an older MariaDB Enterprise version that has reached end of life (EOL) is in use, this is a finding.

Vulnerability Number

V-265882

Documentable

False

Rule Version

MADB-10-012600

Severity Override Guidance

Review the version and release information and check if a suitable enterprise edition is in use:

MariaDB> SELECT VARIABLE_NAME, VARIABLE_VALUE
FROM information_schema.GLOBAL_VARIABLES
WHERE VARIABLE_NAME IN ('version', 'version_comment', 'version_suffix');

Example output for Enterprise 10.6 would be:

+-----------------------------+
| 10.6.25-MariaDB-enterprise |
+-----------------------------+

In Enterprise, the version field itself will contain "-enterprise", and sometimes additional enterprise-specific variables/plugins appear (e.g., enterprise encryption or backup-related variables), but the version string is the definitive indicator. In Community, the version field is usually empty or generic and has no enterprise indicators.

Access the vendor website MariaDB Enterprise download page and check supported releases: https://mariadb.com/downloads/enterprise/enterprise-server/

Pick the corresponding operating system such as Ubuntu, Red Hat, Rocky, or another from drop-down list.

If MariaDB Community Software or an older MariaDB Enterprise version that has reached end of life (EOL) is in use, this is a finding.

Check Content Reference

M

Target Key

5475