CVE-2017-15365
Fixed in a distro release EPSS 3%
sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking.
Products: fedoraproject fedora, mariadb, percona xtradb_cluster
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | mariadb | 10.1.32-r0 |
| Alpine 3.5 | mariadb | 10.1.32-r0 |
| Alpine 3.6 | mariadb | 10.1.32-r0 |
| Alpine 3.7 | mariadb | 10.1.32-r0 |
| Debian 9 | mariadb-10.1 | 10.1.37-0+deb9u1 |
| Red Hat rhel software collections 3 | rh-mariadb102-galera | 0:25.3.25-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-galera | 0:25.3.25-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-galera-debuginfo | 0:25.3.25-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-galera-debuginfo | 0:25.3.25-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-backup | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-backup | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-backup-syspaths | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-backup-syspaths | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-bench | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-bench | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-common | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-common | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-config | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-config | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-config-syspaths | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-config-syspaths | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-debuginfo | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-debuginfo | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-devel | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-devel | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-errmsg | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-errmsg | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-gssapi-client | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-gssapi-client | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-gssapi-server | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-gssapi-server | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-oqgraph-engine | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-oqgraph-engine | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-galera | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-galera | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-galera-syspaths | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-galera-syspaths | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-syspaths | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-syspaths | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-utils | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-utils | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-utils-syspaths | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-server-utils-syspaths | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-syspaths | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-syspaths | 1:10.2.22-1.el7 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-test | 1:10.2.22-1.el6 |
| Red Hat rhel software collections 3 | rh-mariadb102-mariadb-test | 1:10.2.22-1.el7 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE OpenStack Cloud 7 | galera-3 | 25.3.23-8.3 |
| SUSE OpenStack Cloud 7 | mariadb | 10.2.15-7.1 |
| SUSE OpenStack Cloud 7 | mariadb | 10.2.22-10.1 |
| SUSE OpenStack Cloud 7 | mariadb-connector-c | 3.0.3-1.3.3 |
| SUSE OpenStack Cloud 7 | mariadb-connector-c | 3.0.7-1.6.1 |
| SUSE OpenStack Cloud 7 | rubygem-mysql2 | 0.4.10-7.2 |
| SUSE OpenStack Cloud 7 | xtrabackup | 2.4.10-5.3 |
| Ubuntu 16.04 LTS | percona-server-5.6 | no fix |
| Ubuntu 16.04 LTS | percona-xtradb-cluster-5.6 | no fix |