CVE:CVE-2020-15180
CNNVD:CNNVD-202010-371
MariaDB是MariaDB（Mariadb）基金会的一套免费开源的数据库管理系统，也是一个采用Maria存储引擎的MySQL分支版本。
MariaDB存在安全漏洞，该漏洞允许攻击者通过MariaDB的SST非法字符来绕过限制，以提升其特权。
solution:Upgrade mariadb mariadb to a higher version than 10.1.47,10.2.34,10.3.25,10.4.15,10.5.6,and avoid the version [10.1.0,10.1.47),[10.2.0,10.2.34),[10.3.0,10.3.25),[10.4.0,10.4.15),[10.5.0,10.5.6); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade percona xtradb_cluster to a higher version than 5.6.49-28.42.2,5.7.31-31.45.2,8.0.20-11.2,and avoid the version (,5.6.49-28.42.2),[5.7,5.7.31-31.45.2),[8.0,8.0.20-11.2); Upgrade galeracluster galera_cluster_for_mysql to a higher version than 5.6.49,5.7.31,8.0.21,and avoid the version [5.6,5.6.49),[5.7,5.7.31),[8.0,8.0.21)