Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-27928

Fixed in a distro release EPSS 38%

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.

Published 2021-03-19 · CVE record · OSV

Products: mariadb, percona_server, galeracluster wsrep, debian_linux

Distro releases

ReleasePackageFixed in
AlmaLinux 8Judy1.0.5-18.module_el8.6.0+2867+72759d2f
AlmaLinux 8Judy1.0.5-18.module_el8.3.0+2028+5e3224e9
AlmaLinux 8Judy1.0.5-18.module_el8.5.0+2632+14ced695
AlmaLinux 8Judy1.0.5-18.module_el8.6.0+2761+593e5e59
AlmaLinux 8Judy-devel1.0.5-18.module_el8.6.0+3072+3c630e87
AlmaLinux 8Judy-devel1.0.5-18.module_el8.6.0+2867+72759d2f
AlmaLinux 8Judy-devel1.0.5-18.module_el8.3.0+2028+5e3224e9
AlmaLinux 8asio-devel1.10.8-7.module_el8.6.0+2867+72759d2f
AlmaLinux 8asio-devel1.10.8-7.module_el8.6.0+3072+3c630e87
AlmaLinux 8galera25.3.32-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-backup3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-common3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-devel3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-embedded3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-embedded-devel3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-errmsg3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-gssapi-server3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-oqgraph-engine3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-server3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-server-galera3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-server-utils3:10.3.28-1.module_el8.3.0+2177+7adc332a
AlmaLinux 8mariadb-test3:10.3.28-1.module_el8.3.0+2177+7adc332a
Alpine 3.10mariadb10.3.28-r0
Alpine 3.11mariadb10.4.18-r0
Alpine 3.12mariadb10.4.18-r0
Alpine 3.13mariadb10.5.9-r0
Alpine 3.14mariadb10.5.9-r0
Alpine 3.15mariadb10.5.9-r0
Alpine 3.16mariadb10.5.9-r0
Alpine 3.17mariadb10.5.9-r0
Alpine 3.18mariadb10.5.9-r0
Alpine 3.19mariadb10.5.9-r0
Alpine 3.20mariadb10.5.9-r0
Alpine 3.21mariadb10.5.9-r0
Alpine 3.22mariadb10.5.9-r0
Alpine 3.23mariadb10.5.9-r0
Alpine 3.24mariadb10.5.9-r0
Chainguardpercona-server-8.00
Chainguardpercona-server-8.40
Chainguardpercona-server-9.00
Chainguardpercona-server-9.10
Chainguardpercona-server-9.40
Chainguardpercona-server-9.50
Chainguardpercona-server-9.60
Chainguardpercona-server-9.70
Debian 11mariadb-10.51:10.5.9-1
Debian 9mariadb-10.110.1.48-0+deb9u2
Red Hat Enterprise Linux 8Judy0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8Judy-debuginfo0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8Judy-debugsource0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8Judy-devel0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8asio0:1.10.8-7.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8asio-devel0:1.10.8-7.module+el8+2765+cfa4f87b
Red Hat Enterprise Linux 8galera0:25.3.32-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8galera-debuginfo0:25.3.32-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8galera-debugsource0:25.3.32-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-backup3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-backup-debuginfo3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-common3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-debuginfo3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-debugsource3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-devel3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-embedded3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-embedded-debuginfo3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-embedded-devel3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-errmsg3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-gssapi-server3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-gssapi-server-debuginfo3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-oqgraph-engine3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-oqgraph-engine-debuginfo3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-server3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-server-debuginfo3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-server-galera3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-server-utils3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-server-utils-debuginfo3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-test3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat Enterprise Linux 8mariadb-test-debuginfo3:10.3.28-1.module+el8.3.0+10472+7adc332a
Red Hat openstack 13mariadb3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-common3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-config3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-connect-engine3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-debuginfo3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-errmsg3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-libs3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-server3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-server-galera3:10.1.20-3.el7ost
Red Hat openstack 13mariadb-test3:10.1.20-3.el7ost
Red Hat rhel eus 8.1Judy0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1Judy-debuginfo0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1Judy-debugsource0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1Judy-devel0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1asio0:1.10.8-7.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1asio-devel0:1.10.8-7.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.1galera0:25.3.32-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1galera-debuginfo0:25.3.32-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1galera-debugsource0:25.3.32-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-backup3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-backup-debuginfo3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-common3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-debuginfo3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-debugsource3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-devel3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-embedded3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-embedded-debuginfo3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-embedded-devel3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-errmsg3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-gssapi-server3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-gssapi-server-debuginfo3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-oqgraph-engine3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-oqgraph-engine-debuginfo3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-server3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-server-debuginfo3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-server-galera3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-server-utils3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-server-utils-debuginfo3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-test3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.1mariadb-test-debuginfo3:10.3.28-1.module+el8.1.0+10475+47ea4373
Red Hat rhel eus 8.2Judy0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2Judy-debuginfo0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2Judy-debugsource0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2Judy-devel0:1.0.5-18.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2asio0:1.10.8-7.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2asio-devel0:1.10.8-7.module+el8+2765+cfa4f87b
Red Hat rhel eus 8.2galera0:25.3.32-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2galera-debuginfo0:25.3.32-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2galera-debugsource0:25.3.32-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-backup3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-backup-debuginfo3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-common3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-debuginfo3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-debugsource3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-devel3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-embedded3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-embedded-debuginfo3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-embedded-devel3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-errmsg3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-gssapi-server3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-gssapi-server-debuginfo3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-oqgraph-engine3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-oqgraph-engine-debuginfo3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-server3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-server-debuginfo3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-server-galera3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-server-utils3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-server-utils-debuginfo3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-test3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel eus 8.2mariadb-test-debuginfo3:10.3.28-1.module+el8.2.0+10474+c7510d9c
Red Hat rhel software collections 3rh-mariadb103-galera0:25.3.32-2.el7
Red Hat rhel software collections 3rh-mariadb103-galera-debuginfo0:25.3.32-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-backup3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-backup-syspaths3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-common3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-config3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-config-syspaths3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-connect-engine3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-debuginfo3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-devel3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-errmsg3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-gssapi-server3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-oqgraph-engine3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-galera3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-galera-syspaths3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-syspaths3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-utils3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-server-utils-syspaths3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-syspaths3:10.3.28-2.el7
Red Hat rhel software collections 3rh-mariadb103-mariadb-test3:10.3.28-2.el7
Rocky Linux 8Judy0:1.0.5-18.module+el8.4.0+427+adf35707
Rocky Linux 8asio0:1.10.8-7.module+el8.5.0+777+18007c86
Rocky Linux 8asio0:1.10.8-7.module+el8.3.0+126+a7f7b5c5
Rocky Linux 8galera0:25.3.32-1.module+el8.4.0+427+adf35707
Rocky Linux 8mariadb3:10.3.28-1.module+el8.4.0+427+adf35707
SUSE Enterprise Storage 6mariadb10.2.39-3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSmariadb10.2.39-3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSmariadb10.2.39-3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSmariadb10410.4.30-150100.3.5.10
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSpython-mysqlclient1.4.6-150100.3.3.7
SUSE Linux Enterprise High Performance Computing 15-ESPOSmariadb10.2.39-3.40.1
SUSE Linux Enterprise High Performance Computing 15-LTSSmariadb10.2.39-3.40.1
SUSE Linux Enterprise Module for Server Applications 15 SP2mariadb10.4.20-3.9.1
SUSE Linux Enterprise Module for Server Applications 15 SP3mariadb10.5.11-3.3.1
SUSE Linux Enterprise Server 12 SP4-LTSSmariadb10.2.39-3.36.1
SUSE Linux Enterprise Server 12 SP5lz41.8.0-3.5.2
SUSE Linux Enterprise Server 12 SP5mariadb10.2.39-3.36.1
SUSE Linux Enterprise Server 12 SP5mariadb-connector-c3.1.22-2.35.1
SUSE Linux Enterprise Server 12 SP5mariadb10410.4.30-8.5.46
SUSE Linux Enterprise Server 12 SP5python-mysqlclient1.3.14-8.9.2
SUSE Linux Enterprise Server 15 SP1-BCLmariadb10.2.39-3.40.1
SUSE Linux Enterprise Server 15 SP1-LTSSmariadb10.2.39-3.40.1
SUSE Linux Enterprise Server 15 SP1-LTSSmariadb10410.4.30-150100.3.5.10
SUSE Linux Enterprise Server 15 SP1-LTSSpython-mysqlclient1.4.6-150100.3.3.7
SUSE Linux Enterprise Server 15-LTSSmariadb10.2.39-3.40.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4mariadb10.2.39-3.36.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5lz41.8.0-3.5.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5mariadb10.2.39-3.36.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5mariadb-connector-c3.1.22-2.35.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5mariadb10410.4.30-8.5.46
SUSE Linux Enterprise Server for SAP Applications 12 SP5python-mysqlclient1.3.14-8.9.2
SUSE Linux Enterprise Server for SAP Applications 15mariadb10.2.39-3.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1mariadb10.2.39-3.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1mariadb10410.4.30-150100.3.5.10
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-mysqlclient1.4.6-150100.3.3.7
SUSE Linux Enterprise Software Development Kit 12 SP5lz41.8.0-3.5.2
SUSE Linux Enterprise Software Development Kit 12 SP5mariadb-connector-c3.1.22-2.35.1
SUSE Linux Enterprise Software Development Kit 12 SP5mariadb10410.4.30-8.5.46
SUSE Linux Enterprise Software Development Kit 12 SP5python-mysqlclient1.3.14-8.9.2
SUSE Manager Proxy 4.0mariadb10.2.39-3.40.1
SUSE Manager Retail Branch Server 4.0mariadb10.2.39-3.40.1
SUSE Manager Server 4.0mariadb10.2.39-3.40.1
SUSE OpenStack Cloud 9mariadb10.2.39-3.36.1
SUSE OpenStack Cloud Crowbar 9mariadb10.2.39-3.36.1
Ubuntu 16.04 LTSpercona-server-5.6no fix
Ubuntu 18.04 LTSmariadb-10.1no fix
Ubuntu 20.04 LTSmariadb-10.3no fix
Wolfipercona-server-8.40
Wolfipercona-server-9.10
Wolfipercona-server-9.50
Wolfipercona-server-9.60
openSUSE Leap 15.3mariadb10.5.11-3.3.1
openSUSE Leap 15.3mariadb10.4.20-3.9.1
openSUSE Leap 15.3mariadb10.2.39-3.40.1
openSUSE Tumbleweedmariadb10.6.5-3.1