Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-15180

Fixed in a distro release EPSS 6%

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.

Published 2021-05-27 · CVE record · OSV

Products: mariadb, debian_linux, percona xtradb_cluster, galeracluster galera_cluster_for_mysql

Distro releases

ReleasePackageFixed in
AlmaLinux 8Judy1.0.5-18.module_el8.6.0+2867+72759d2f
AlmaLinux 8Judy1.0.5-18.module_el8.5.0+2632+14ced695
AlmaLinux 8Judy1.0.5-18.module_el8.6.0+2761+593e5e59
Alpine 3.10mariadb10.3.25-r0
Alpine 3.11mariadb10.4.15-r0
Alpine 3.12mariadb10.4.15-r0
Alpine 3.13mariadb10.5.6-r0
Alpine 3.14mariadb10.5.6-r0
Alpine 3.15mariadb10.5.6-r0
Alpine 3.16mariadb10.5.6-r0
Alpine 3.17mariadb10.5.6-r0
Alpine 3.18mariadb10.5.6-r0
Alpine 3.19mariadb10.5.6-r0
Alpine 3.20mariadb10.5.6-r0
Alpine 3.21mariadb10.5.6-r0
Alpine 3.22mariadb10.5.6-r0
Alpine 3.23mariadb10.5.6-r0
Alpine 3.24mariadb10.5.6-r0
Alpine 3.9mariadb10.3.25-r0
Debian 10mariadb-10.31:10.3.25-0+deb10u1
Debian 11mariadb-10.51:10.5.6-1
Debian 9mariadb-10.110.1.47-0+deb9u1
Red Hat Enterprise Linux 8Judy0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8Judy-debuginfo0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8Judy-debugsource0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8galera0:25.3.31-1.module+el8.3.0+8843+3f4e42f6
Red Hat Enterprise Linux 8galera-debuginfo0:25.3.31-1.module+el8.3.0+8843+3f4e42f6
Red Hat Enterprise Linux 8galera-debugsource0:25.3.31-1.module+el8.3.0+8843+3f4e42f6
Red Hat Enterprise Linux 8mariadb3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-backup3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-backup-debuginfo3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-common3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-debuginfo3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-debugsource3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-devel3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-embedded3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-embedded-debuginfo3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-embedded-devel3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-errmsg3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-gssapi-server3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-gssapi-server-debuginfo3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-oqgraph-engine3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-oqgraph-engine-debuginfo3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-server3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-server-debuginfo3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-server-galera3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-server-utils3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-server-utils-debuginfo3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-test3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat Enterprise Linux 8mariadb-test-debuginfo3:10.3.27-3.module+el8.3.0+8972+5e3224e9
Red Hat openstack 10mariadb-galera1:5.5.62-2.el7ost
Red Hat openstack 10mariadb-galera-common1:5.5.62-2.el7ost
Red Hat openstack 10mariadb-galera-debuginfo1:5.5.62-2.el7ost
Red Hat openstack 10mariadb-galera-server1:5.5.62-2.el7ost
Red Hat rhel e4s 8.0Judy0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel e4s 8.0Judy-debuginfo0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel e4s 8.0Judy-debugsource0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel e4s 8.0galera0:25.3.31-1.module+el8.0.0+9239+73817dd5
Red Hat rhel e4s 8.0galera-debuginfo0:25.3.31-1.module+el8.0.0+9239+73817dd5
Red Hat rhel e4s 8.0galera-debugsource0:25.3.31-1.module+el8.0.0+9239+73817dd5
Red Hat rhel e4s 8.0mariadb3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-backup3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-backup-debuginfo3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-common3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-debuginfo3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-debugsource3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-devel3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-embedded3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-embedded-debuginfo3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-embedded-devel3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-errmsg3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-gssapi-server3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-gssapi-server-debuginfo3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-oqgraph-engine3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-oqgraph-engine-debuginfo3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-server3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-server-debuginfo3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-server-galera3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-server-utils3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-server-utils-debuginfo3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-test3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel e4s 8.0mariadb-test-debuginfo3:10.3.27-3.module+el8.0.0+9160+9822c5c7
Red Hat rhel eus 8.1Judy0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1Judy-debuginfo0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1Judy-debugsource0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1galera0:25.3.31-1.module+el8.1.0+8860+1543d51b
Red Hat rhel eus 8.1galera-debuginfo0:25.3.31-1.module+el8.1.0+8860+1543d51b
Red Hat rhel eus 8.1galera-debugsource0:25.3.31-1.module+el8.1.0+8860+1543d51b
Red Hat rhel eus 8.1mariadb3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-backup3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-backup-debuginfo3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-common3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-debuginfo3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-debugsource3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-devel3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-embedded3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-embedded-debuginfo3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-embedded-devel3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-errmsg3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-gssapi-server3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-gssapi-server-debuginfo3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-oqgraph-engine3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-oqgraph-engine-debuginfo3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-server3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-server-debuginfo3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-server-galera3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-server-utils3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-server-utils-debuginfo3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-test3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.1mariadb-test-debuginfo3:10.3.27-3.module+el8.1.0+9159+f0191ef0
Red Hat rhel eus 8.2Judy0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2Judy-debuginfo0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2Judy-debugsource0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2galera0:25.3.31-1.module+el8.2.0+8857+d5b3039b
Red Hat rhel eus 8.2galera-debuginfo0:25.3.31-1.module+el8.2.0+8857+d5b3039b
Red Hat rhel eus 8.2galera-debugsource0:25.3.31-1.module+el8.2.0+8857+d5b3039b
Red Hat rhel eus 8.2mariadb3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-backup3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-backup-debuginfo3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-common3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-debuginfo3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-debugsource3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-devel3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-embedded3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-embedded-debuginfo3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-embedded-devel3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-errmsg3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-gssapi-server3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-gssapi-server-debuginfo3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-oqgraph-engine3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-oqgraph-engine-debuginfo3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-server3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-server-debuginfo3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-server-galera3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-server-utils3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-server-utils-debuginfo3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-test3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel eus 8.2mariadb-test-debuginfo3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4
Red Hat rhel software collections 3rh-mariadb103-galera0:25.3.31-1.el7
Red Hat rhel software collections 3rh-mariadb103-galera-debuginfo0:25.3.31-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-backup3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-backup-syspaths3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-common3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-config3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-config-syspaths3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-connect-engine3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-debuginfo3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-devel3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-errmsg3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-gssapi-server3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-oqgraph-engine3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-galera3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-galera-syspaths3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-syspaths3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-utils3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-utils-syspaths3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-syspaths3:10.3.27-1.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-test3:10.3.27-1.el7
Rocky Linux 8Judy0:1.0.5-18.module+el8.4.0+427+adf35707
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSmariadb10410.4.30-150100.3.5.10
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSpython-mysqlclient1.4.6-150100.3.3.7
SUSE Linux Enterprise High Performance Computing 15-ESPOSmariadb10.2.36-3.34.4
SUSE Linux Enterprise High Performance Computing 15-ESPOSmariadb-connector-c3.1.11-3.22.2
SUSE Linux Enterprise High Performance Computing 15-LTSSmariadb10.2.36-3.34.4
SUSE Linux Enterprise High Performance Computing 15-LTSSmariadb-connector-c3.1.11-3.22.2
SUSE Linux Enterprise Module for Basesystem 15 SP1mariadb-connector-c3.1.11-3.22.2
SUSE Linux Enterprise Module for Basesystem 15 SP2mariadb-connector-c3.1.11-3.22.2
SUSE Linux Enterprise Module for Server Applications 15 SP1mariadb10.2.36-3.34.4
SUSE Linux Enterprise Module for Server Applications 15 SP1mariadb-connector-c3.1.11-3.22.2
SUSE Linux Enterprise Module for Server Applications 15 SP2mariadb10.4.17-3.6.1
SUSE Linux Enterprise Module for Server Applications 15 SP2mariadb-connector-c3.1.11-3.22.2
SUSE Linux Enterprise Server 12 SP4-LTSSmariadb10.2.36-3.33.1
SUSE Linux Enterprise Server 12 SP4-LTSSmariadb-connector-c3.1.11-2.19.1
SUSE Linux Enterprise Server 12 SP5lz41.8.0-3.5.2
SUSE Linux Enterprise Server 12 SP5mariadb10.2.36-3.33.1
SUSE Linux Enterprise Server 12 SP5mariadb-connector-c3.1.22-2.35.1
SUSE Linux Enterprise Server 12 SP5mariadb-connector-c3.1.11-2.19.1
SUSE Linux Enterprise Server 12 SP5mariadb10410.4.30-8.5.46
SUSE Linux Enterprise Server 12 SP5python-mysqlclient1.3.14-8.9.2
SUSE Linux Enterprise Server 15 SP1-LTSSmariadb10410.4.30-150100.3.5.10
SUSE Linux Enterprise Server 15 SP1-LTSSpython-mysqlclient1.4.6-150100.3.3.7
SUSE Linux Enterprise Server 15-LTSSmariadb10.2.36-3.34.4
SUSE Linux Enterprise Server 15-LTSSmariadb-connector-c3.1.11-3.22.2
SUSE Linux Enterprise Server for SAP Applications 12 SP4mariadb10.2.36-3.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4mariadb-connector-c3.1.11-2.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5lz41.8.0-3.5.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5mariadb10.2.36-3.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5mariadb-connector-c3.1.11-2.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5mariadb-connector-c3.1.22-2.35.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5mariadb10410.4.30-8.5.46
SUSE Linux Enterprise Server for SAP Applications 12 SP5python-mysqlclient1.3.14-8.9.2
SUSE Linux Enterprise Server for SAP Applications 15mariadb10.2.36-3.34.4
SUSE Linux Enterprise Server for SAP Applications 15mariadb-connector-c3.1.11-3.22.2
SUSE Linux Enterprise Server for SAP Applications 15 SP1mariadb10410.4.30-150100.3.5.10
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-mysqlclient1.4.6-150100.3.3.7
SUSE Linux Enterprise Software Development Kit 12 SP5lz41.8.0-3.5.2
SUSE Linux Enterprise Software Development Kit 12 SP5mariadb-connector-c3.1.22-2.35.1
SUSE Linux Enterprise Software Development Kit 12 SP5mariadb10410.4.30-8.5.46
SUSE Linux Enterprise Software Development Kit 12 SP5python-mysqlclient1.3.14-8.9.2
SUSE OpenStack Cloud 7mariadb10.2.36-19.1
SUSE OpenStack Cloud 9mariadb10.2.36-3.33.1
SUSE OpenStack Cloud 9mariadb-connector-c3.1.11-2.19.1
SUSE OpenStack Cloud Crowbar 9mariadb10.2.36-3.33.1
SUSE OpenStack Cloud Crowbar 9mariadb-connector-c3.1.11-2.19.1
Ubuntu 16.04 LTSmariadb-10.0no fix
Ubuntu 18.04 LTSmariadb-10.11:10.1.47-0ubuntu0.18.04.1
Ubuntu 20.04 LTSmariadb-10.31:10.3.25-0ubuntu0.20.04.1
openSUSE Leap 15.1mariadb10.2.36-lp151.2.18.1
openSUSE Leap 15.1mariadb-connector-c3.1.11-lp151.3.15.1
openSUSE Leap 15.2mariadb10.4.17-lp152.2.8.1
openSUSE Leap 15.2mariadb-connector-c3.1.11-lp152.4.1
openSUSE Tumbleweedmariadb10.6.4-2.1