| Description: | | MySQL servers expose an extensible interface that allows loading arbitrary shared libraries as user-defined functions (UDFs). Attackers who obtain privileged database credentials can craft a malicious ELF shared object, encode it as a hexadecimal literal, and inject it through SQL statements. Once the binary is written to a writable server directory and registered as a function, the attacker gains the ability to execute native code with the privileges of the database process, typically leading to full host compromise, installation of backdoors, lateral movement, and exfiltration of sensitive data stored in the database or accessible file systems. |