A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade asio-develUpgrade mariadbUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-commonUpgrade mariadb-testUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade Judy-devel | May 4, 2022 | Mar 19, 2021 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Mar 19, 2021 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-connect-engineUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-sphinx-engineUpgrade mariadb-s3-engineUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-cracklib-password-checkUpgrade mariadb-commonUpgrade mariadb-libsUpgrade mariadb-rocksdb-engine | Sep 28, 2023 | Mar 19, 2021 |
| Centos_linux | — | Upgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadbUpgrade mariadb-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-gssapi-server-debuginfo | Apr 20, 2021 | Mar 19, 2021 |
| Debian | — | Upgrade mariadb-10.5 | Mar 24, 2021 | Mar 19, 2021 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 28, 2021 | Mar 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadbUpgrade mariadb-devel | Apr 26, 2022 | Mar 19, 2021 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Mar 19, 2021 |
| Oracle_linux | — | Upgrade mariadb-serverUpgrade JudyUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-commonUpgrade galeraUpgrade Judy-develUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade asio-develUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded | Apr 27, 2021 | Mar 19, 2021 |
| Redhat_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-embedded-debuginfoUpgrade Judy-develUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade JudyUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade galera-debuginfoUpgrade asio-develUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfo | Apr 20, 2021 | Mar 19, 2021 |
| Rocky_linux | — | Upgrade mariadb-backupUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade Judy-debugsourceUpgrade galeraUpgrade asio-develUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade Judy-develUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade galera-debugsource | Mar 12, 2024 | Mar 19, 2021 |
| Suse | — | Upgrade libmariadbd19Upgrade mariadb-errormessagesUpgrade mariadb-testUpgrade mariadb-toolsUpgrade mariadbUpgrade mariadb-clientUpgrade libmysqld-develUpgrade mariadb-galeraUpgrade libmariadbd-develUpgrade libmysqld19Upgrade mariadb-benchUpgrade mariadb-rpm-macros | Aug 5, 2021 | Mar 19, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub