{"schema_version":"1.9.0","id":"BIT-mysql-client-2021-27928","published":"2024-03-06T11:07:46.098Z","modified":"2026-09-08T08:48:15.874632067Z","aliases":["BIT-mariadb-2021-27928","BIT-mariadb-min-2021-27928","CVE-2021-27928"],"details":"A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.","affected":[{"package":{"name":"mysql-client","ecosystem":"Bitnami","purl":"pkg:bitnami/mysql-client"},"ranges":[{"type":"SEMVER","events":[{"introduced":"10.2.0"},{"fixed":"10.2.37"},{"introduced":"10.3.0"},{"fixed":"10.3.28"},{"introduced":"10.4.0"},{"fixed":"10.4.18"},{"introduced":"10.5.0"},{"fixed":"10.5.9"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/mysql-client/BIT-mysql-client-2021-27928.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}],"references":[{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/162177/MariaDB-10.2-Command-Execution.html"},{"type":"ADVISORY","url":"https://jira.mariadb.org/browse/MDEV-25179"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00028.html"},{"type":"ADVISORY","url":"https://mariadb.com/kb/en/mariadb-10237-release-notes/"},{"type":"ADVISORY","url":"https://mariadb.com/kb/en/mariadb-10328-release-notes/"},{"type":"ADVISORY","url":"https://mariadb.com/kb/en/mariadb-10418-release-notes/"},{"type":"ADVISORY","url":"https://mariadb.com/kb/en/mariadb-1059-release-notes/"},{"type":"ADVISORY","url":"https://mariadb.com/kb/en/security/"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202105-28"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27928"}],"database_specific":{"cpes":["cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"],"severity":"High"}}