A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade asio-develUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-backupUpgrade Judy-devel | May 4, 2022 | Mar 19, 2021 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Mar 19, 2021 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-pamUpgrade mariadb-libsUpgrade mariadb-rocksdb-engineUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-cracklib-password-checkUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-configUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-connect-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-s3-engineUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-debuginfo | Sep 28, 2023 | Mar 19, 2021 |
| Centos_linux | — | Upgrade mariadbUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade galeraUpgrade mariadb-develUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-testUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-server-debuginfo | Apr 20, 2021 | Mar 19, 2021 |
| Debian | — | Upgrade mariadb-10.5 | Mar 24, 2021 | Mar 19, 2021 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 28, 2021 | Mar 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Apr 26, 2022 | Mar 19, 2021 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Mar 19, 2021 |
| Oracle_linux | — | Upgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade Judy-develUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-testUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade asio-develUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-gssapi-server | Apr 27, 2021 | Mar 19, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mariadb-testUpgrade mariadb-develUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade asio-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-debuginfoUpgrade Judy-develUpgrade mariadb-commonUpgrade Judy-debugsourceUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfo | Apr 20, 2021 | Mar 19, 2021 |
| Rocky_linux | — | Upgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade galeraUpgrade Judy-develUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embeddedUpgrade asio-develUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-gssapi-server-debuginfo | Mar 12, 2024 | Mar 19, 2021 |
| Suse | — | Upgrade mariadb-galeraUpgrade libmysqld19Upgrade libmariadbd-develUpgrade mariadb-benchUpgrade mariadb-clientUpgrade libmysqld-develUpgrade mariadb-rpm-macrosUpgrade mariadb-toolsUpgrade mariadbUpgrade libmariadbd19Upgrade mariadb-errormessagesUpgrade mariadb-test | Aug 5, 2021 | Mar 19, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub