Is CVE-2020-15180 actively exploited?

CVE-2020-15180 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2020-15180?

CVE-2020-15180 has a CVSS score of 9 (CRITICAL severity). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H.

How do I patch CVE-2020-15180?

Patch guidance is available from mariadb security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2020-15180.

Fix CVE-2020-15180 - CRITICAL mariadb mariadb

Q: Which products are affected by CVE-2020-15180?

13 products: mariadb mariadb, mariadb mariadb, mariadb mariadb, mariadb mariadb, mariadb mariadb, and 8 more.

Description

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector: network
Complexity: high
Privileges: none
User Action: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-20 · Improper Input Validation CWE-77 · Command Injection

Metadata

Primary Vendor: MARIADB
Published: 5/27/2021
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

mariadb : mariadbmariadb : mariadbmariadb : mariadbmariadb : mariadbmariadb : mariadbdebian : debian_linuxdebian : debian_linuxpercona : xtradb_clusterpercona : xtradb_clusterpercona : xtradb_clustergaleracluster : galera_cluster_for_mysqlgaleracluster : galera_cluster_for_mysqlgaleracluster : galera_cluster_for_mysql

Remediation Guidance

Executive Summary

Cite this page

CVE-2020-15180. CVEDatabase.com. Retrieved 1 May 2026. https://cvedatabase.com/cve/CVE-2020-15180

View on NIST NVD

CVE-2020-15180 vulnerability