CVE-2017-15365

sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking.

• https://access.redhat.com/errata/RHSA-2019:1258
• https://bugzilla.redhat.com/show_bug.cgi?id=1524234Issue Tracking, Third Party Advisory
• https://github.com/MariaDB/server/commit/0b5a5258abbeaf8a0c3a18c7e753699787fdf46ePatch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELCZV46WIYSJ6VMC65GMNN3A3QDRUJGK/
• https://mariadb.com/kb/en/library/mariadb-10130-release-notes/Release Notes, Vendor Advisory
• https://mariadb.com/kb/en/library/mariadb-10210-release-notes/Release Notes, Vendor Advisory
• https://www.debian.org/security/2018/dsa-4341
• https://www.percona.com/blog/2017/10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/Release Notes, Vendor Advisory
• https://www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.19-29.22-3.htmlRelease Notes, Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1258
• https://bugzilla.redhat.com/show_bug.cgi?id=1524234Issue Tracking, Third Party Advisory
• https://github.com/MariaDB/server/commit/0b5a5258abbeaf8a0c3a18c7e753699787fdf46ePatch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELCZV46WIYSJ6VMC65GMNN3A3QDRUJGK/
• https://mariadb.com/kb/en/library/mariadb-10130-release-notes/Release Notes, Vendor Advisory
• https://mariadb.com/kb/en/library/mariadb-10210-release-notes/Release Notes, Vendor Advisory
• https://www.debian.org/security/2018/dsa-4341
• https://www.percona.com/blog/2017/10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/Release Notes, Vendor Advisory
• https://www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.19-29.22-3.htmlRelease Notes, Vendor Advisory

Published

Jan 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1536IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8…
• CVE-2017-15360PRTG Network Monitor version 17.3.33.2830 is vulnerable to s…
• CVE-2017-15361The Infineon RSA library 1.02.013 in Infineon Trusted Platfo…
• CVE-2017-15362osTicket 1.10.1 allows arbitrary client-side JavaScript code…
• CVE-2017-15363Directory traversal vulnerability in public/examples/resourc…7.5
• CVE-2017-15364The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remo…
• CVE-2017-15366Before Thornberry NDoc version 8.0, laptop clients and the s…
• CVE-2017-15367Bacula-web before 8.0.0-rc2 is affected by multiple SQL Inje…
• CVE-2017-15368The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare…
• CVE-2017-15369The build_filter_chain function in pdf/pdf-stream.c in Artif…
• CVE-2017-15370There is a heap-based buffer overflow in the ImaExpandS func…
• CVE-2017-15371There is a reachable assertion abort in the function sox_app…