Server side template injection In mariadb
Description
A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrep_sst_method allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.20 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.6-r0 | 10.5.6-r0 | |
alpine v3.15 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.6-r0 | 10.5.6-r0 | |
alpine v3.22 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.6-r0 | 10.5.6-r0 | |
 debian 11 | >=0 <1:10.5.6-1 | 1:10.5.6-1 | |
alpine v3.13 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.6-r0 | 10.5.6-r0 | |
alpine v3.14 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.6-r0 | 10.5.6-r0 | |
alpine v3.16 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.6-r0 | 10.5.6-r0 | |
alpine v3.18 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.6-r0 | 10.5.6-r0 | |
alpine v3.9 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.15-r0 || =10.3.16-r0 || =10.3.17-r0 || =10.3.20-r0 || =10.3.22-r0 || =10.3.23-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.3.25-r0 | 10.3.25-r0 | |
alpine v3.10 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.17-r0 || =10.3.18-r0 || =10.3.20-r0 || =10.3.22-r0 || =10.3.23-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.3.25-r0 | 10.3.25-r0 |
1-10 of 19
10
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.