huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2017-14166: libarchive: Heap-based buffer over-read in the atol8 function
Component: libarchive
Severity: Low
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 3.3 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2017-09-05T00:00:00+00:00

libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.


Affected upstream versions: n/a
Fixed upstream versions: v3.3.3
Upstream repository: https://github.com/libarchive/libarchive
Upstream fix commit: fa7438a0ff4033e4741c807394a9af6207940d71
CVE-2017-14340: kernel: xfs: unprivileged user kernel oops
Component: kernel
Severity: Moderate
CWE: CWE-391 (Unchecked Error Condition)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

A flaw was found where the XFS filesystem code mishandles a user-settable inode flag in the Linux kernel prior to 4.14-rc1. This can cause a local denial of service via a kernel panic.

Statement: This issue does not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7  as the code with the flaw is not built in these products due to theirs build configuration.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux MRG-2. Future updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.14
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: b31ff3cdf540110da4572e3e29bd172087af65cc
CVE-2017-14482: emacs: command injection flaw within "enriched mode" handling
Component: emacs
Severity: Important
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 8.1 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-09-04T00:00:00+00:00

A command injection flaw within the Emacs "enriched mode" handling has been discovered. By tricking an unsuspecting user into opening a specially crafted file using Emacs, a remote attacker could exploit this flaw to execute arbitrary commands with the privileges of the Emacs user.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/emacs.git
Upstream fix commit: 9ad0fcc54442a9a01d41be19880250783426db70
CVE-2017-14491: dnsmasq: heap overflow in the code responsible for building DNS replies
Component: dnsmasq
Severity: Critical
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-10-02T00:00:00+00:00

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code.

Statement: Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw's affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.

However, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as 'yum update' or 'openstack overcloud update').

Affected upstream versions: n/a
Fixed upstream versions: v2.78
Upstream repository: https://thekelleys.org.uk/gitweb/dnsmasq.git
Upstream fix commit: 0549c73b7ea6b22a3c49beb4d432f185a81efcbc
CVE-2017-14492: dnsmasq: heap overflow in the IPv6 router advertisement code
Component: dnsmasq
Severity: Critical
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 8.8 (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-10-02T00:00:00+00:00

A heap buffer overflow was discovered in dnsmasq in the IPv6 router advertisement (RA) handling code. An attacker on the local network segment could send crafted RAs to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. This issue only affected configurations using one of these options: enable-ra, ra-only, slaac, ra-names, ra-advrouter, or ra-stateless.

Statement: Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw's affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.

However, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as 'yum update' or 'openstack overcloud update').

Affected upstream versions: n/a
Fixed upstream versions: v2.78
Upstream repository: https://thekelleys.org.uk/gitweb/dnsmasq.git
Upstream fix commit: 24036ea507862c7b7898b68289c8130f85599c10
CVE-2017-14493: dnsmasq: stack buffer overflow in the DHCPv6 code
Component: dnsmasq
Severity: Critical
CWE: CWE-121 (Stack-based Buffer Overflow)
CVSS v3: 8.8 (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-10-02T00:00:00+00:00

A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code.

Statement: Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw's affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.

However, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as 'yum update' or 'openstack overcloud update').

Affected upstream versions: n/a
Fixed upstream versions: v2.78
Upstream repository: https://thekelleys.org.uk/gitweb/dnsmasq.git
Upstream fix commit: 3d4ff1ba8419546490b464418223132529514033
CVE-2017-14494: dnsmasq: information leak in the DHCPv6 relay code
Component: dnsmasq
Severity: Important
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2017-10-02T00:00:00+00:00

An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data.

Statement: Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw's affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.

However, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as 'yum update' or 'openstack overcloud update').

Affected upstream versions: n/a
Fixed upstream versions: v2.78
Upstream repository: https://thekelleys.org.uk/gitweb/dnsmasq.git
Upstream fix commit: 33e3f1029c9ec6c63e430ff51063a6301d4b2262
CVE-2017-14495: dnsmasq: memory exhaustion vulnerability in the EDNS0 code
Component: dnsmasq
Severity: Important
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-10-02T00:00:00+00:00

A memory exhaustion flaw was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets which would trigger memory allocations which would never be freed, leading to unbounded memory consumption and eventually a crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet.

Statement: Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw's affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.

However, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as 'yum update' or 'openstack overcloud update').

Affected upstream versions: n/a
Fixed upstream versions: v2.78
Upstream repository: https://thekelleys.org.uk/gitweb/dnsmasq.git
Upstream fix commit: 51eadb692a5123b9838e5a68ecace3ac579a3a45
CVE-2017-14496: dnsmasq: integer underflow leading to buffer over-read in the EDNS0 code
Component: dnsmasq
Severity: Important
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-10-02T00:00:00+00:00

An integer underflow flaw leading to a buffer over-read was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet.

Statement: Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw's affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.

However, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as 'yum update' or 'openstack overcloud update').

Affected upstream versions: n/a
Fixed upstream versions: v2.78
Upstream repository: https://thekelleys.org.uk/gitweb/dnsmasq.git
Upstream fix commit: 897c113fda0886a28a986cc6ba17bb93bd6cb1c7
CVE-2017-14502: libarchive: Off-by-one error in the read_header function
Component: libarchive
Severity: Moderate
CWE: CWE-193 (Off-by-one Error)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-09-16T00:00:00+00:00

read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.


Affected upstream versions: n/a
Fixed upstream versions: v3.3.3
Upstream repository: https://github.com/libarchive/libarchive
Upstream fix commit: 5562545b5562f6d12a4ef991fae158bf4ccf92b6
CVE-2017-14604: nautilus: Insufficient validation of trust of .desktop files with execute permission
Component: nautilus
Severity: Moderate
CWE: CWE-345 (Insufficient Verification of Data Authenticity)
CVSS v3: 4.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)
Public date: 2017-01-31T00:00:00+00:00

An untrusted .desktop file with executable permission set could choose its displayed name and icon, and execute commands without warning when opened by the user. An attacker could use this flaw to trick a user into opening a .desktop file disguised as a document, such as a PDF, and execute arbitrary commands.


Affected upstream versions: n/a
Fixed upstream versions: 3.23.90
Upstream repository: https://github.com/GNOME/nautilus
Upstream fix commit: 1630f53481f445ada0a455e9979236d31a8d3bb0
CVE-2017-15111: keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py
Component: keycloak-httpd-client-install
Severity: Low
CWE: CWE-377 (Insecure Temporary File)
CVSS v3: 3.9 (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L)
Public date: 2018-01-05T00:00:00+00:00

It was discovered that keycloak-httpd-client-install uses a predictable log file name in /tmp. A local attacker could create a symbolic link to a sensitive location, possibly causing data corruption or denial of service.

Statement: Red Hat Product Security has rated this issue as having security impact of Low. This issue may be fixed in a future version of Red Hat Enterprise Linux.

OpenStack users please note, this issue is present in:
* Red Hat OpenStack Platform 9.0 (Mitaka)
* Red Hat OpenStack Platform 10.0 (Newton) 
* Red Hat OpenStack Platform 11.0 (Ocata)

If a fixed version of keycloak-httpd-client-install is made available in Red Hat Enterprise Linux, OpenStack customers should consume this package directly from the Red Hat Enterprise Linux channel (this occurs during normal updates).

Affected upstream versions: before 0.8
Fixed upstream versions: RELEASE_0_8
Upstream repository: https://github.com/jdennis/keycloak-httpd-client-install
Upstream fix commit: 07f26e213196936fb328ea0c1d5a66a09d8b5440
CVE-2017-15112: keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line
Component: keycloak-httpd-client-install
Severity: Low
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 2.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)
Public date: 2018-01-05T00:00:00+00:00

In keycloak-http-client-install prior to version 0.8, the admin password could be provided through a command-line argument. This might result in the password being leaked through shell history, or becoming visible to a local attacker at the time the program is running.

Statement: Red Hat Product Security has rated this issue as having security impact of Low. This issue may be fixed in a future version of Red Hat Enterprise Linux.

OpenStack users please note, this issue is present in:
* Red Hat OpenStack Platform 9.0 (Mitaka)
* Red Hat OpenStack Platform 10.0 (Newton) 
* Red Hat OpenStack Platform 11.0 (Ocata)

If a fixed version of keycloak-httpd-client-install is made available in Red Hat Enterprise Linux, OpenStack customers should consume this package directly from the Red Hat Enterprise Linux channel (this occurs during normal updates).

Affected upstream versions: before 0.8
Fixed upstream versions: RELEASE_0_8
Upstream repository: https://github.com/jdennis/keycloak-httpd-client-install
Upstream fix commit: c3121b271abaaa1a76de2b9ae89dacde0105cd75
CVE-2017-15113: ovirt-engine: DEBUG logging includes unmasked passwords
Component: ovirt-engine
Severity: Low
CWE: CWE-212 (Improper Removal of Sensitive Information Before Storage or Transfer)
CVSS v3: 7.2 (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)
Public date: 2017-11-13T00:00:00+00:00

ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to troubleshoot issues.


Affected upstream versions: 4.1.7.6
Upstream repository: https://gerrit.ovirt.org/ovirt-engine.git
Upstream fix commit: f4a5d0cc772127dbfe40789e26c4633ceea07d14
CVE-2017-15116: kernel: Null pointer dereference in rngapi_reset function
Component: kernel
Severity: Low
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 3.3 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Public date: 2017-08-28T00:00:00+00:00

A flaw was found in the Linux kernel's random number generator API. A null pointer dereference in the rngapi_reset function may result in denial of service, crashing the system.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat
Enterprise Linux 5 and 6 and kernel-alt.

This issue affects the Linux kernel packages as shipped with Red Hat
Enterprise Linux 7 and MRG-2.

Future Linux kernel updates for the respective releases may address this issue.

Affected upstream versions: Linux kernel
Fixed upstream versions: v4.2
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6
CVE-2017-15126: kernel: Use-after-free in userfaultfd_event_wait_completion function in userfaultfd.c
Component: kernel
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 7 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-12-05T00:00:00+00:00

A flaw was found in the Linux kernel's handling of fork failure when dealing with event messages in the userfaultfd code. Failure to fork correctly can create a fork event that will be removed from an already freed list of events.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.

This issue affects the Linux kernel packages as shipped with Red Hat
Enterprise Linux 7, realtime, MRG-2 prior to version kernel-3.10.0-781.

The kernel-alt package already as shipped contains this fix.

Affected upstream versions: Linux Kernel before 4.13.6
Fixed upstream versions: v4.14
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 384632e67e0829deb8015ee6ad916b180049d252
CVE-2017-15127: kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c
Component: kernel
Severity: Low
CWE: CWE-460 (Improper Cleanup on Thrown Exception)
CVSS v3: 4.7 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-12-08T00:00:00+00:00

A flaw was found in the Linux kernel when freeing pages in hugetlbfs. This could trigger a local denial of service by crashing the kernel.


Affected upstream versions: Linux kernel before 4.13
Fixed upstream versions: v4.13
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 5af10dfd0afc559bb4b0f7e3e8227a1578333995
CVE-2017-15129: kernel: net: double-free and memory corruption in get_net_ns_by_id()
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 6.1 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Public date: 2017-12-19T00:00:00+00:00

A use-after-free vulnerability was found in a network namespaces code affecting the Linux kernel since v4.0-rc1 through v4.15-rc5. The function get_net_ns_by_id() does not check for the net::count value after it has found a peer network in netns_ids idr which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.

Statement: This issue does not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5 and 6 as the code with the flaw is not present in the products listed.

This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future updates for the respective releases may address this issue.

Affected upstream versions: Linux kernel v4.0-rc1 through v4.15-rc5
Fixed upstream versions: v4.15
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 21b5944350052d2583e82dd59b19a9ba94a007f0
CVE-2017-15265: kernel: Use-after-free in snd_seq_ioctl_create_port()
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-10-11T00:00:00+00:00

A use-after-free vulnerability was found when issuing an ioctl to a sound device. This could allow a user to exploit a race condition and create memory corruption or possibly privilege escalation.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat
Enterprise Linux 5,6, 7, realtime and MRG-2.

Red Hat Enterprise Linux 5 has transitioned to Production phase 3.  
During the Production 3 Phase, Critical impact Security Advisories (RHSAs) 
and selected Urgent Priority Bug Fix Advisories (RHBAs) may be released 
as they become available.

The official life cycle policy can be reviewed here:

http://redhat.com/rhel/lifecycle

Future Linux kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.14
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 71105998845fb012937332fe2e806d443c09e026
CVE-2017-15274: kernel: dereferencing NULL payload with nonzero length
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-06-08T00:00:00+00:00

A flaw was found in the implementation of associative arrays where the add_key systemcall and KEYCTL_UPDATE operations allowed for a NULL payload with a nonzero length. When accessing the payload within this length parameters value, an unprivileged user could trivially cause a NULL pointer dereference (kernel oops).

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise
Linux 5,6,7, MRG-2 and realtime kernels.

Red Hat Enterprise Linux 5 has transitioned to Production phase 3.  
During the Production 3 Phase, Critical impact Security Advisories (RHSAs) 
and selected Urgent Priority Bug Fix Advisories (RHBAs) may be released 
as they become available.

At this time this bug is not meet this critera and is unlikley to be fixed
for these releases.

The official life cycle policy can be reviewed here:

http://redhat.com/rhel/lifecycle

Future Linux kernel updates for the products in production phase 1 and 2, namely Red Hat Enterprise
Linux 6, 7 and MRG-2 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.12
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 5649645d725c73df4302428ee4e02c869248b4c5
CVE-2017-15306: Kernel: KVM: oops when checking KVM_CAP_PPC_HTM on PPC platform
Component: Kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 6.2 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-11-06T00:00:00+00:00

The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a KVM_CHECK_EXTENSION KVM_CAP_PPC_HTM ioctl call to /dev/kvm.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v4.14
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: ac64115a66c18c01745bbd3c47a36b124e5fd8c0
CVE-2017-15365: mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks
Component: mariadb
Severity: Moderate
CWE: CWE-284 (Improper Access Control)
CVSS v3: 8.8 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-10-06T00:00:00+00:00

It was discovered that MariaDB could replicate certain data definition language (DDL) commands to other cluster nodes despite an access control check failure. A user with an SQL access to the server could possibly use this flaw to perform database modification on certain cluster nodes without having privileges to perform such changes.


Affected upstream versions: n/a
Fixed upstream versions: mariadb-10.2.10
Upstream repository: https://github.com/MariaDB/server
Upstream fix commit: 0b5a5258abbeaf8a0c3a18c7e753699787fdf46e