CVE-2021-27928

HIGH7.2EPSS 48.9%

mariadb-10.1 - security update

發布日:2021/3/19修改日:2025/12/3

也稱為:ALPINE-CVE-2021-27928

描述

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.

受影響套件(6)

Alpine/mariadbfrom 0, < 10.3.28-r0
Bitnami/mariadb>= 10.2.0, < 10.2.37, >= 10.3.0, < 10.3.28, >= 10.4.0, < 10.4.18, >= 10.5.0, < 10.5.9
Bitnami/mariadb-min>= 10.2.0, < 10.2.37, >= 10.3.0, < 10.3.28, >= 10.4.0, < 10.4.18, >= 10.5.0, < 10.5.9
Bitnami/mysql-client>= 10.2.0, < 10.2.37, >= 10.3.0, < 10.3.28, >= 10.4.0, < 10.4.18, >= 10.5.0, < 10.5.9
Debian/mariadb-10.1from 0, < 10.1.48-0+deb9u2
Debian/mariadb-10.5from 0, < 1:10.5.9-1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

描述

受影響套件(6)

CVSS 分數

參考連結(12)