libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-judyalma-upgrade-mariadb-connector-calma-upgrade-mariadb-connector-c-configalma-upgrade-mariadb-connector-c-devel | May 4, 2022 | May 20, 2020 | |
| Alpine Linux | alpine-linux-upgrade-mariadb-connector-c | Jan 4, 2021 | May 20, 2020 | |
| Centos_linux | — | centos-upgrade-galeracentos-upgrade-galera-debuginfocentos-upgrade-galera-debugsourcecentos-upgrade-judycentos-upgrade-judy-debuginfocentos-upgrade-judy-debugsourcecentos-upgrade-mariadbcentos-upgrade-mariadb-backupcentos-upgrade-mariadb-backup-debuginfocentos-upgrade-mariadb-commoncentos-upgrade-mariadb-connector-ccentos-upgrade-mariadb-connector-c-configcentos-upgrade-mariadb-connector-c-debuginfocentos-upgrade-mariadb-connector-c-debugsourcecentos-upgrade-mariadb-connector-c-develcentos-upgrade-mariadb-connector-c-devel-debuginfocentos-upgrade-mariadb-debuginfocentos-upgrade-mariadb-debugsourcecentos-upgrade-mariadb-develcentos-upgrade-mariadb-embeddedcentos-upgrade-mariadb-embedded-debuginfocentos-upgrade-mariadb-embedded-develcentos-upgrade-mariadb-errmsgcentos-upgrade-mariadb-gssapi-servercentos-upgrade-mariadb-gssapi-server-debuginfocentos-upgrade-mariadb-oqgraph-enginecentos-upgrade-mariadb-oqgraph-engine-debuginfocentos-upgrade-mariadb-servercentos-upgrade-mariadb-server-debuginfocentos-upgrade-mariadb-server-galeracentos-upgrade-mariadb-server-utilscentos-upgrade-mariadb-server-utils-debuginfocentos-upgrade-mariadb-testcentos-upgrade-mariadb-test-debuginfo | Dec 21, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-mariadb-connector-chuawei-euleros-2_0_sp8-upgrade-mariadb-connector-c-confighuawei-euleros-2_0_sp8-upgrade-mariadb-connector-c-devel | Aug 31, 2020 | May 20, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-mariadb-connector-c | Nov 3, 2020 | May 20, 2020 | |
| Mariadb Mariadb | mariadb-mariadb-upgrade-latest | Mar 4, 2025 | May 20, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-asio-develoracle-linux-upgrade-galeraoracle-linux-upgrade-judyoracle-linux-upgrade-judy-develoracle-linux-upgrade-mariadboracle-linux-upgrade-mariadb-backuporacle-linux-upgrade-mariadb-commonoracle-linux-upgrade-mariadb-connector-coracle-linux-upgrade-mariadb-connector-c-configoracle-linux-upgrade-mariadb-connector-c-develoracle-linux-upgrade-mariadb-develoracle-linux-upgrade-mariadb-embeddedoracle-linux-upgrade-mariadb-embedded-develoracle-linux-upgrade-mariadb-errmsgoracle-linux-upgrade-mariadb-gssapi-serveroracle-linux-upgrade-mariadb-oqgraph-engineoracle-linux-upgrade-mariadb-serveroracle-linux-upgrade-mariadb-server-galeraoracle-linux-upgrade-mariadb-server-utilsoracle-linux-upgrade-mariadb-test | Dec 18, 2020 | May 20, 2020 |
| Redhat_linux | redhat-upgrade-galeraredhat-upgrade-galera-debuginforedhat-upgrade-galera-debugsourceredhat-upgrade-judyredhat-upgrade-judy-debuginforedhat-upgrade-judy-debugsourceredhat-upgrade-mariadbredhat-upgrade-mariadb-backupredhat-upgrade-mariadb-backup-debuginforedhat-upgrade-mariadb-commonredhat-upgrade-mariadb-connector-credhat-upgrade-mariadb-connector-c-configredhat-upgrade-mariadb-connector-c-debuginforedhat-upgrade-mariadb-connector-c-debugsourceredhat-upgrade-mariadb-connector-c-develredhat-upgrade-mariadb-connector-c-devel-debuginforedhat-upgrade-mariadb-debuginforedhat-upgrade-mariadb-debugsourceredhat-upgrade-mariadb-develredhat-upgrade-mariadb-embeddedredhat-upgrade-mariadb-embedded-debuginforedhat-upgrade-mariadb-embedded-develredhat-upgrade-mariadb-errmsgredhat-upgrade-mariadb-gssapi-serverredhat-upgrade-mariadb-gssapi-server-debuginforedhat-upgrade-mariadb-oqgraph-engineredhat-upgrade-mariadb-oqgraph-engine-debuginforedhat-upgrade-mariadb-serverredhat-upgrade-mariadb-server-debuginforedhat-upgrade-mariadb-server-galeraredhat-upgrade-mariadb-server-utilsredhat-upgrade-mariadb-server-utils-debuginforedhat-upgrade-mariadb-testredhat-upgrade-mariadb-test-debuginfo | Dec 21, 2020 | May 20, 2020 | |
| Rocky_linux | rocky-upgrade-judyrocky-upgrade-judy-debuginforocky-upgrade-judy-debugsourcerocky-upgrade-mariadb-connector-crocky-upgrade-mariadb-connector-c-debuginforocky-upgrade-mariadb-connector-c-debugsourcerocky-upgrade-mariadb-connector-c-develrocky-upgrade-mariadb-connector-c-devel-debuginfo | Mar 12, 2024 | May 20, 2020 | |
| Suse | — | suse-upgrade-libmariadb-develsuse-upgrade-libmariadb3suse-upgrade-libmariadb3-32bitsuse-upgrade-libmariadb_pluginssuse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd19suse-upgrade-libmariadbprivatesuse-upgrade-libmysqld-develsuse-upgrade-libmysqld19suse-upgrade-mariadbsuse-upgrade-mariadb-benchsuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-galerasuse-upgrade-mariadb-testsuse-upgrade-mariadb-tools | May 27, 2020 | May 20, 2020 |
| Ubuntu | ubuntu-upgrade-mariadb-server | Oct 28, 2020 | May 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub