← Back

CVE-2017-15365

nvd nist
Published: Jan 25, 2018Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking.

Affected (5)

Fedoraproject
1 product
Fedora
Mariadb
1 product
Mariadb
Percona
1 product
Xtradb Cluster
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 26
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Mariadb
Mariadb
Before 10.1.30
Mariadb
From 10.2.0 to 10.2.10
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Percona
Xtradb Cluster
Before 5.6.37-26.21-3
Xtradb Cluster
From 5.7.0 to 5.7.19-29.22-3

References (18)

Source: cve@mitre.org
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.