Approved changes feed: RSS · Atom
cpe:2.3:a:galeracluster:wsrep:*:*:*:*:*:mysql:*:*
part: a version: * update: *
| Vendor | Galeracluster (6f7ed538-ff13-51dd-977b-5306e0888f8f) |
|---|---|
| Product | Wsrep (57658040-5f2d-5cd3-a570-7cac93339ed5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | mysql |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/codership/documentation |
purl2cpe | 2026-06-01 10:16:06.462695 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-27928 |
vulnerable | 2026-06-08 05:31:22.767371 |
Details available
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
Published: 2021-03-19T02:46:44.000Z
Updated: 2024-08-03T21:33:17.002Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.