Talos is releasing details of a new vulnerability within the MySQL Multi-Master Manager. This is used to perform monitoring, failover and management of master-master replication configurations. An attacker that can initiate a TCP session with mmm_agentd can trigger these vulnerabilities. A specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution. The following Snort Rules will detect exploitation attempts. For the most current rule information, please refer to your FireSIGHT Management Center or Snort.org.”]
Source: https://blog.talosintelligence.com/2018/05/vulnerability-spotlight-mysql-mmm.html