Alpine/mariadb: critical 9
A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary
Action: Upgrade mariadb to 10.4.15-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.1.0 | 10.4.15-r0 | - |
Fixed versions
| 10.4.15-r0 |
Sources
- osv: ALPINE-CVE-2020-15180#Alpine:v3.11/mariadb
- https://security.alpinelinux.org/vuln/CVE-2020-15180
published · modified · JSON