REDHAT-BUG-2488458: High severity MariaDB MariaDB Server vulnerability
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrepsstreceiveaddress or wsrepsstdonor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MariaDB server (Galera/WSREP)to a version that resolves this vulnerability.Fixed in 10.6.27 - Upgrade
Upgrade
MariaDB server (Galera/WSREP)to a version that resolves this vulnerability.Fixed in 10.11.18 - Upgrade
Upgrade
MariaDB server (Galera/WSREP)to a version that resolves this vulnerability.Fixed in 11.4.12 - Upgrade
Upgrade
MariaDB server (Galera/WSREP)to a version that resolves this vulnerability.Fixed in 11.8.8 - Upgrade
Upgrade
MariaDB server (Galera/WSREP)to a version that resolves this vulnerability.Fixed in 12.3.2
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2488458?
The severity of REDHAT-BUG-2488458 is high, rated at 7.
How do I fix REDHAT-BUG-2488458?
To fix REDHAT-BUG-2488458, upgrade to MariaDB versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, or 12.4.0 or later.
Which versions of MariaDB are affected by REDHAT-BUG-2488458?
Versions affected by REDHAT-BUG-2488458 include 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1.
What component is targeted in REDHAT-BUG-2488458?
The vulnerability in REDHAT-BUG-2488458 targets the wsrep_sst_receive_address and wsrep_sst_donor global system variables.
Who is at risk from REDHAT-BUG-2488458?
High-privileged MariaDB users are at risk from the vulnerability described in REDHAT-BUG-2488458.