CVE-2017-15945

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-15945

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15945.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-15945

Published

2017-10-27T21:29:00.310Z

Modified

2026-04-10T03:57:37.174125Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type

GIT

Repo

https://github.com/mariadb/server

Events

Introduced

Fixed

656d0f10e51a554ec2ff895c5e25e16a5da0d00e

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "10.0.30"
        }
    ]
}

Affected versions

mariadb-galera-10.*

mariadb-galera-10.0.10

mariadb-galera-10.0.11

mariadb-galera-10.0.12

mariadb-galera-10.0.13

mariadb-galera-10.0.14

mariadb-galera-10.0.15

mariadb-galera-10.0.16

mariadb-galera-10.0.17

mariadb-galera-10.0.19

mariadb-galera-10.0.20

mariadb-galera-10.0.21

mariadb-galera-10.0.22

mariadb-galera-10.0.23

mariadb-galera-10.0.24

mariadb-galera-10.0.25

mariadb-galera-10.0.26

mariadb-galera-10.0.27

mariadb-galera-10.0.28

mariadb-galera-10.0.29

mariadb-galera-10.0.7

mariadb-galera-10.0.7a

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15945.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "5.6.36"
            }
        ]
    }
]