A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade Judy-develUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade asio-develUpgrade mariadb-develUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-server-utils | May 4, 2022 | Mar 19, 2021 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Mar 19, 2021 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-cracklib-password-checkUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-libsUpgrade mariadb-rocksdb-engineUpgrade mariadb-configUpgrade mariadb-develUpgrade mariadb-connect-engineUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-s3-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-test | Sep 28, 2023 | Mar 19, 2021 |
| Centos_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade galera | Apr 20, 2021 | Mar 19, 2021 |
| Debian | — | Upgrade mariadb-10.5 | Mar 24, 2021 | Mar 19, 2021 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 28, 2021 | Mar 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Apr 26, 2022 | Mar 19, 2021 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Mar 19, 2021 |
| Oracle_linux | — | Upgrade mariadb-server-galeraUpgrade mariadbUpgrade asio-develUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-serverUpgrade Judy-devel | Apr 27, 2021 | Mar 19, 2021 |
| Redhat_linux | — | Upgrade mariadb-commonUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-embedded-debuginfoUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade galeraUpgrade mariadbUpgrade Judy-develUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade asio-develUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-devel | Apr 20, 2021 | Mar 19, 2021 |
| Rocky_linux | — | Upgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade asio-develUpgrade mariadbUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade Judy-develUpgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server | Mar 12, 2024 | Mar 19, 2021 |
| Suse | — | Upgrade mariadb-rpm-macrosUpgrade mariadb-galeraUpgrade libmariadbd-develUpgrade mariadb-benchUpgrade mariadb-clientUpgrade libmysqld-develUpgrade libmysqld19Upgrade mariadb-toolsUpgrade mariadbUpgrade mariadb-errormessagesUpgrade mariadb-testUpgrade libmariadbd19 | Aug 5, 2021 | Mar 19, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub