Critical Vulnerability in MariaDB: Bypass of Access Restrictions
Summary
ALPINE-CVE-2017-15365: sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass i... Affects mariadb versions < 10.1.32-r0. Fixed in 10.1.32-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MariaDB is an open-source relational database management system that is widely used for managing and organizing data. It is known for its performance, scalability, and robustness, making it a popular choice for web applications and enterprise solutions. However, certain versions of MariaDB are vulnerable to a critical issue that allows remote authenticated users to bypass intended access restrictions, potentially leading to unauthorized data manipulation.
Vulnerability Detail
The vulnerability, identified as CVE-2017-15365, exists in the sql/event_data_objects.cc file of MariaDB versions prior to 10.1.30 and 10.2.x before 10.2.10. It allows remote authenticated users with SQL access to exploit incorrect ordering of Data Definition Language (DDL) replication and Access Control List (ACL) checking. This can lead to unauthorized replication of DDL statements to cluster nodes, compromising the integrity of the database system. The CVSS score for this vulnerability is 8.8, indicating a high severity level.
How To Fix
Minimum fixed version
10.1.32-r0
This is the first release that contains the fix.
sudo apk add --upgrade mariadbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict SQL access for remote authenticated users until the patch is applied. This can be achieved by modifying the database user permissions to limit access to sensitive DDL operations.
Conclusion
In summary, CVE-2017-15365 is a critical vulnerability in MariaDB that allows unauthorized access to DDL operations. Users are strongly advised to update to the latest patched versions to mitigate the risks associated with this vulnerability. For those unable to update immediately, restricting user access can serve as a temporary solution.
See every vulnerability recorded for mariadb →
FAQ
CVE-2017-15365 is a vulnerability in MariaDB that allows remote authenticated users to bypass access restrictions and replicate DDL statements.
Versions of MariaDB prior to 10.1.30 and 10.2.x before 10.2.10 are affected by this vulnerability.
The vulnerability can lead to unauthorized data manipulation and compromise the integrity of the database, allowing attackers to execute unintended DDL operations.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider restricting SQL access for remote authenticated users as a temporary measure.
References
Related vulnerabilities
Recent vulnerabilities recorded for mariadb.
