PatchTheCVEgaleracluster vulnerabilities
Recent CVEs affecting galeracluster products. 2 tracked.
galeracluster has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-05-27. Highest priority: CVE-2020-15180 (score 65/100).
- CVE-2021-27928 HIGH 7.2 UPGRADE UPGRADE A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before
- CVE-2020-15180 CRITICAL 9.0 UPGRADE MITIGATE A flaw was found in the mysql-wsrep component of mariadb
FAQ
How do I fix galeracluster vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is galeracluster being exploited right now?
None of the tracked galeracluster CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which galeracluster CVE should I patch first?
CVE-2020-15180 currently ranks highest (65/100): A flaw was found in the mysql-wsrep component of mariadb.