libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade JudyUpgrade mariadb-connector-c-develUpgrade mariadb-connector-c-configUpgrade mariadb-connector-c | May 4, 2022 | May 20, 2020 |
| Alpine Linux | — | Upgrade mariadb-connector-c | Jan 4, 2021 | May 20, 2020 |
| Centos_linux | — | Upgrade galera-debugsourceUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade Judy-debuginfoUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-connector-cUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-connector-c-configUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-connector-c-develUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-connector-c-debuginfoUpgrade galera-debuginfoUpgrade Judy | Dec 21, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-connector-c-develUpgrade mariadb-connector-cUpgrade mariadb-connector-c-config | Aug 31, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade mariadb-connector-c | Nov 3, 2020 | May 20, 2020 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 20, 2020 |
| Oracle_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-connector-cUpgrade mariadbUpgrade Judy-develUpgrade asio-develUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-connector-c-develUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-connector-c-configUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-commonUpgrade Judy | Dec 18, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-connector-c-develUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-errmsgUpgrade mariadb-connector-cUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade Judy-debugsourceUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-connector-c-debuginfoUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade JudyUpgrade mariadb-connector-c-configUpgrade mariadb-test-debuginfo | Dec 21, 2020 | May 20, 2020 |
| Rocky_linux | — | Upgrade mariadb-connector-c-debugsourceUpgrade mariadb-connector-cUpgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-connector-c-debuginfoUpgrade JudyUpgrade mariadb-connector-c-devel | Mar 12, 2024 | May 20, 2020 |
| Suse | — | Upgrade libmariadbd19Upgrade mariadb-clientUpgrade mariadbUpgrade libmariadbd-develUpgrade libmysqld19Upgrade libmysqld-develUpgrade mariadb-benchUpgrade libmariadb_pluginsUpgrade mariadb-testUpgrade libmariadbprivateUpgrade libmariadb3-32bitUpgrade mariadb-toolsUpgrade libmariadb-develUpgrade mariadb-errormessagesUpgrade mariadb-galeraUpgrade libmariadb3 | May 27, 2020 | May 20, 2020 |
| Ubuntu | — | Upgrade mariadb-server | Oct 28, 2020 | May 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub