libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-connector-c-configUpgrade mariadb-connector-cUpgrade mariadb-connector-c-develUpgrade Judy | May 4, 2022 | May 20, 2020 |
| Alpine Linux | — | Upgrade mariadb-connector-c | Jan 4, 2021 | May 20, 2020 |
| Centos_linux | — | Upgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-connector-c-develUpgrade mariadb-connector-c-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-connector-cUpgrade mariadb-commonUpgrade mariadb-backupUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-connector-c-configUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-connector-c-devel-debuginfoUpgrade galera-debugsourceUpgrade galera | Dec 21, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-connector-c-develUpgrade mariadb-connector-cUpgrade mariadb-connector-c-config | Aug 31, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade mariadb-connector-c | Nov 3, 2020 | May 20, 2020 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 20, 2020 |
| Oracle_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-connector-c-develUpgrade asio-develUpgrade mariadbUpgrade mariadb-embeddedUpgrade Judy-develUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-connector-cUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-connector-c-configUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-embedded-devel | Dec 18, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade mariadb-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-connector-c-develUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-connector-cUpgrade mariadb-gssapi-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-connector-c-debuginfoUpgrade mariadb-connector-c-configUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-test-debuginfo | Dec 21, 2020 | May 20, 2020 |
| Rocky_linux | — | Upgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-connector-c-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-connector-cUpgrade Judy-debugsourceUpgrade mariadb-connector-c-debuginfoUpgrade mariadb-connector-c-develUpgrade Judy | Mar 12, 2024 | May 20, 2020 |
| Suse | — | Upgrade mariadb-galeraUpgrade libmysqld19Upgrade libmariadb_pluginsUpgrade libmariadbprivateUpgrade mariadb-benchUpgrade libmariadb-develUpgrade libmariadb3Upgrade mariadb-errormessagesUpgrade mariadb-testUpgrade libmariadb3-32bitUpgrade libmysqld-develUpgrade mariadb-toolsUpgrade mariadbUpgrade mariadb-clientUpgrade libmariadbd-develUpgrade libmariadbd19 | May 27, 2020 | May 20, 2020 |
| Ubuntu | — | Upgrade mariadb-server | Oct 28, 2020 | May 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub