Server side template injection In mariadb
Description
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.11 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.15-r0 || =10.4.17-r0 || =10.4.17-r1 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.4.18-r0 | 10.4.18-r0 | |
alpine v3.16 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =10.5.6-r0 || =10.5.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.9-r0 | 10.5.9-r0 | |
alpine v3.19 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =10.5.6-r0 || =10.5.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.9-r0 | 10.5.9-r0 | |
alpine v3.20 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =10.5.6-r0 || =10.5.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.9-r0 | 10.5.9-r0 | |
alpine v3.21 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =10.5.6-r0 || =10.5.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.9-r0 | 10.5.9-r0 | |
alpine v3.10 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.17-r0 || =10.3.18-r0 || =10.3.20-r0 || =10.3.22-r0 || =10.3.23-r0 || =10.3.25-r0 || =10.3.27-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.3.28-r0 | 10.3.28-r0 | |
alpine v3.12 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.15-r0 || =10.4.17-r0 || =10.4.17-r1 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.4.18-r0 | 10.4.18-r0 | |
alpine v3.13 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =10.5.6-r0 || =10.5.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.9-r0 | 10.5.9-r0 | |
alpine v3.14 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =10.5.6-r0 || =10.5.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.9-r0 | 10.5.9-r0 | |
alpine v3.15 | =10.0.21-r0 || =10.0.21-r1 || =10.0.21-r2 || =10.1.11-r0 || =10.1.11-r1 || =10.1.12-r0 || =10.1.12-r1 || =10.1.13-r0 || =10.1.13-r1 || =10.1.14-r0 || =10.1.14-r1 || =10.1.14-r2 || =10.1.14-r3 || =10.1.16-r0 || =10.1.17-r0 || =10.1.17-r1 || =10.1.18-r0 || =10.1.18-r1 || =10.1.19-r0 || =10.1.20-r0 || =10.1.21-r0 || =10.1.22-r0 || =10.1.22-r1 || =10.1.22-r2 || =10.1.24-r0 || =10.1.26-r0 || =10.1.28-r0 || =10.1.28-r1 || =10.1.28-r2 || =10.1.31-r0 || =10.1.8-r0 || =10.1.8-r1 || =10.1.9-r0 || =10.1.9-r1 || =10.1.9-r2 || =10.1.9-r3 || =10.2.13-r0 || =10.2.13-r1 || =10.2.14-r0 || =10.2.14-r1 || =10.2.14-r2 || =10.2.15-r0 || =10.3.10-r0 || =10.3.10-r1 || =10.3.11-r0 || =10.3.12-r0 || =10.3.12-r1 || =10.3.12-r2 || =10.3.13-r0 || =10.3.13-r1 || =10.3.13-r2 || =10.3.13-r3 || =10.3.13-r4 || =10.3.15-r0 || =10.3.16-r0 || =10.3.9-r0 || =10.3.9-r1 || =10.3.9-r2 || =10.4.10-r0 || =10.4.10-r1 || =10.4.11-r0 || =10.4.12-r0 || =10.4.13-r0 || =10.4.13-r1 || =10.4.14-r0 || =10.4.6-r0 || =10.4.6-r1 || =10.4.7-r0 || =10.4.8-r0 || =10.5.5-r0 || =10.5.6-r0 || =10.5.8-r0 || =5.5.41-r0 || =5.5.41-r1 || =5.5.41-r2 || =5.5.42-r0 || =5.5.42-r1 || =5.5.42-r2 || =5.5.42-r3 || =5.5.42-r4 || =5.5.43-r0 || =5.5.43-r1 || =5.5.43-r2 || =5.5.43-r3 || =5.5.43-r4 || =5.5.43-r5 || >=0 <10.5.9-r0 | 10.5.9-r0 |
1-10 of 21
10
Aliases
References
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.