A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-testUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-backupUpgrade Judy-develUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-embeddedUpgrade asio-develUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-devel | May 4, 2022 | Mar 19, 2021 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Mar 19, 2021 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-cracklib-password-checkUpgrade mariadb-libsUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-configUpgrade mariadb-commonUpgrade mariadb-rocksdb-engineUpgrade mariadb-develUpgrade mariadb-s3-engineUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-connect-engine | Sep 28, 2023 | Mar 19, 2021 |
| Centos_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-develUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsg | Apr 20, 2021 | Mar 19, 2021 |
| Debian | — | Upgrade mariadb-10.5 | Mar 24, 2021 | Mar 19, 2021 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 28, 2021 | Mar 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Apr 26, 2022 | Mar 19, 2021 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Mar 19, 2021 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-testUpgrade Judy-develUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade asio-develUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-embedded | Apr 27, 2021 | Mar 19, 2021 |
| Redhat_linux | — | Upgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embeddedUpgrade Judy-develUpgrade galeraUpgrade mariadb-commonUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade asio-develUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade mariadb-server-utils | Apr 20, 2021 | Mar 19, 2021 |
| Rocky_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade Judy-develUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade asio-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade galera-debugsource | Mar 12, 2024 | Mar 19, 2021 |
| Suse | — | Upgrade mariadb-rpm-macrosUpgrade libmysqld19Upgrade mariadb-clientUpgrade mariadb-benchUpgrade libmysqld-develUpgrade mariadb-galeraUpgrade libmariadbd-develUpgrade libmariadbd19Upgrade mariadbUpgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade mariadb-test | Aug 5, 2021 | Mar 19, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub