CVE-2021-27928: Code Injection
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrepprovider and wsrepnotifycmd. NOTE: this does not affect an Oracle product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-27928?
The severity of CVE-2021-27928 is critical with a CVSS score of 7.2.
Which software is affected by CVE-2021-27928?
MariaDB versions before 10.2.37, 10.3.28, 10.4.18, and 10.5.9, Percona Server through 2021-03-03, and Galeracluster Wsrep through 2021-03-03 for MySQL are affected.
What is the vulnerability description of CVE-2021-27928?
CVE-2021-27928 is a remote code execution issue in MariaDB, Percona Server, and Galeracluster Wsrep for MySQL. An untrusted search path leads to eval injection, allowing an attacker to execute arbitrary code.
Are there any public references for CVE-2021-27928?
Yes, you can find more information about CVE-2021-27928 at the following links: [http://packetstormsecurity.com/files/162177/MariaDB-10.2-Command-Execution.html](http://packetstormsecurity.com/files/162177/MariaDB-10.2-Command-Execution.html), [https://jira.mariadb.org/browse/MDEV-25179](https://jira.mariadb.org/browse/MDEV-25179), [https://lists.debian.org/debian-lts-announce/2021/03/msg00028.html](https://lists.debian.org/debian-lts-announce/2021/03/msg00028.html).
How can I fix the vulnerability in CVE-2021-27928?
To fix CVE-2021-27928, update MariaDB to version 10.2.37, 10.3.28, 10.4.18, or 10.5.9, update Percona Server to a version after 2021-03-03, or update Galeracluster Wsrep to a version after 2021-03-03.