REDHAT-BUG-2487957: High severity MariaDB MariaDB Server vulnerability
MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with wsrepnotifycmd enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable wsrepnotifycmd.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.6.27 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.11.18 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 11.4.12 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 11.8.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 12.3.2 - Configuration
If you cannot upgrade immediately, disable `wsrep_notify_cmd` to prevent shell commands embedded in the joiner node name from being executed (vulnerable when enabled on 10.6.1-10.6.26, 10.11.1-10.11.17, 11.4.1-11.4.11, 11.8.1-11.8.7, and 12.3.1).
MariaDB server wsrep_notify_cmd = disabled
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2487957?
The severity of REDHAT-BUG-2487957 is classified as high with a score of 7.
What versions are affected by REDHAT-BUG-2487957?
REDHAT-BUG-2487957 affects MariaDB server versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1.
How do I fix REDHAT-BUG-2487957?
To fix REDHAT-BUG-2487957, upgrade to the patched version of MariaDB server that addresses this vulnerability.
What is the main issue detailed in REDHAT-BUG-2487957?
The main issue in REDHAT-BUG-2487957 involves executing shell commands embedded in the name of the joiner node when `wsrep_notify_cmd` is enabled.
What is the risk level associated with REDHAT-BUG-2487957?
The risk level associated with REDHAT-BUG-2487957 is rated at 33.