libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-connector-c-configUpgrade mariadb-connector-cUpgrade mariadb-connector-c-develUpgrade Judy | May 4, 2022 | May 20, 2020 |
| Alpine Linux | — | Upgrade mariadb-connector-c | Jan 4, 2021 | May 20, 2020 |
| Centos_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-connector-c-configUpgrade mariadb-serverUpgrade mariadb-backupUpgrade Judy-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-commonUpgrade mariadb-debuginfoUpgrade mariadb-connector-cUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadbUpgrade mariadb-connector-c-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade mariadb-connector-c-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy | Dec 21, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-connector-c-develUpgrade mariadb-connector-cUpgrade mariadb-connector-c-config | Aug 31, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade mariadb-connector-c | Nov 3, 2020 | May 20, 2020 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 20, 2020 |
| Oracle_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-connector-c-configUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadbUpgrade mariadb-connector-cUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade Judy-develUpgrade asio-develUpgrade mariadb-testUpgrade mariadb-connector-c-devel | Dec 18, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-connector-c-develUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade mariadb-connector-cUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-connector-c-configUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade galera-debuginfoUpgrade mariadb-connector-c-debuginfoUpgrade Judy-debugsource | Dec 21, 2020 | May 20, 2020 |
| Rocky_linux | — | Upgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-connector-c-debugsourceUpgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-connector-cUpgrade mariadb-connector-c-debuginfoUpgrade mariadb-connector-c-develUpgrade Judy | Mar 12, 2024 | May 20, 2020 |
| Suse | — | Upgrade libmysqld-develUpgrade libmariadb3Upgrade mariadb-galeraUpgrade libmariadb3-32bitUpgrade mariadb-testUpgrade libmariadb_pluginsUpgrade mariadb-benchUpgrade libmariadbprivateUpgrade libmysqld19Upgrade libmariadb-develUpgrade mariadb-toolsUpgrade mariadb-errormessagesUpgrade mariadb-clientUpgrade libmariadbd-develUpgrade libmariadbd19Upgrade mariadb | May 27, 2020 | May 20, 2020 |
| Ubuntu | — | Upgrade mariadb-server | Oct 28, 2020 | May 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub