A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade Judy-develUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade asio-develUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-server-utils | May 4, 2022 | Mar 19, 2021 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Mar 19, 2021 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-cracklib-password-checkUpgrade mariadb-commonUpgrade mariadb-configUpgrade mariadb-libsUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-connect-engineUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb | Sep 28, 2023 | Mar 19, 2021 |
| Centos_linux | — | Upgrade mariadb-server-utilsUpgrade mariadbUpgrade galeraUpgrade mariadb-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-debuginfo | Apr 20, 2021 | Mar 19, 2021 |
| Debian | — | Upgrade mariadb-10.5 | Mar 24, 2021 | Mar 19, 2021 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 28, 2021 | Mar 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Apr 26, 2022 | Mar 19, 2021 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Mar 19, 2021 |
| Oracle_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade asio-develUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade Judy-develUpgrade mariadb-server | Apr 27, 2021 | Mar 19, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade asio-develUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade galera-debuginfoUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade Judy-develUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-common | Apr 20, 2021 | Mar 19, 2021 |
| Rocky_linux | — | Upgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade asio-develUpgrade mariadb-server-utilsUpgrade Judy-develUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-testUpgrade galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade Judy | Mar 12, 2024 | Mar 19, 2021 |
| Suse | — | Upgrade mariadb-rpm-macrosUpgrade mariadb-clientUpgrade mariadb-galeraUpgrade libmariadbd-develUpgrade libmysqld-develUpgrade mariadb-benchUpgrade libmysqld19Upgrade mariadb-testUpgrade mariadb-errormessagesUpgrade libmariadbd19Upgrade mariadb-toolsUpgrade mariadb | Aug 5, 2021 | Mar 19, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub