The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade Judy | May 4, 2022 | May 27, 2021 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | May 27, 2021 |
| Centos_linux | — | Upgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-testUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-serverUpgrade mariadb-develUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utils | Dec 21, 2020 | Dec 15, 2020 |
| Debian | — | Upgrade mariadb-10.5 | Oct 22, 2020 | Oct 22, 2020 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb105-server | Oct 19, 2020 | Oct 18, 2020 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | Nov 12, 2020 | Nov 11, 2020 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 27, 2021 |
| Oracle_linux | — | Upgrade asio-develUpgrade Judy-develUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-server | Dec 18, 2020 | Oct 6, 2020 |
| Redhat_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade galera-debugsourceUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-testUpgrade galera-debuginfo | Dec 21, 2020 | Dec 15, 2020 |
| Rocky_linux | — | Upgrade Judy-debuginfoUpgrade JudyUpgrade Judy-debugsource | Mar 12, 2024 | May 27, 2021 |
| Suse | — | Upgrade libmariadb_pluginsUpgrade mariadb-clientUpgrade mariadbUpgrade libmariadbd19Upgrade mariadb-toolsUpgrade libmariadbd-develUpgrade mariadb-testUpgrade libmysqld19Upgrade mariadb-errormessagesUpgrade libmariadbprivateUpgrade mariadb-benchUpgrade mariadb-rpm-macrosUpgrade libmariadb3Upgrade mariadb-galeraUpgrade libmysqld-develUpgrade libmariadb3-32bitUpgrade libmariadb-devel | Nov 25, 2020 | Oct 7, 2020 |
| Ubuntu | — | Upgrade mariadb-server | Oct 28, 2020 | Oct 7, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub