Log in Start free

Vulnerability · Published May 27, 2021 · Assigned by GitHub_M

CVE-2020-15180

Critical 9.0

In plain English

A critical-severity improper input validation in mariadb. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.5% (higher than 93% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.0Critical
Exploit odds (30 days)5.5%top 7.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8Judy1.0.5-18.module_el8.6.0+2867+72759d2fALSA-2020:5500
AlmaLinux:8Judy1.0.5-18.module_el8.5.0+2632+14ced695ALSA-2020:5500
AlmaLinux:8Judy1.0.5-18.module_el8.6.0+2761+593e5e59ALSA-2020:5500
Alpine:v3.20mariadb10.5.6-r0ALPINE-CVE-2020-15180
Alpine:v3.21mariadb10.5.6-r0ALPINE-CVE-2020-15180
Alpine:v3.22mariadb10.5.6-r0ALPINE-CVE-2020-15180
Alpine:v3.23mariadb10.5.6-r0ALPINE-CVE-2020-15180
Alpine:v3.24mariadb10.5.6-r0ALPINE-CVE-2020-15180
Rocky Linux:8Judy0:1.0.5-18.module+el8.4.0+427+adf35707RLSA-2020:5500

Affected products (as reported)

VendorProductVersions
n/a mariadb mariadb 10.1.47, mariadb 10.2.34, mariadb 10.3.25, mariadb 10.4.15, mariadb 10.5.6

Weakness: CWE-20

References