libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-connector-c-develUpgrade JudyUpgrade mariadb-connector-c-configUpgrade mariadb-connector-c | May 4, 2022 | May 20, 2020 |
| Alpine Linux | — | Upgrade mariadb-connector-c | Jan 4, 2021 | May 20, 2020 |
| Centos_linux | — | Upgrade JudyUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-connector-c-develUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-connector-c-debuginfoUpgrade mariadb-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-connector-cUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-connector-c-configUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-connector-c-devel-debuginfoUpgrade galera-debugsource | Dec 21, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-connector-cUpgrade mariadb-connector-c-configUpgrade mariadb-connector-c-devel | Aug 31, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade mariadb-connector-c | Nov 3, 2020 | May 20, 2020 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 20, 2020 |
| Oracle_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-connector-c-configUpgrade mariadb-develUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-connector-cUpgrade mariadb-embeddedUpgrade mariadb-connector-c-develUpgrade Judy-develUpgrade asio-develUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-test | Dec 18, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-connector-cUpgrade mariadb-debugsourceUpgrade mariadb-connector-c-develUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-connector-c-devel-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-develUpgrade galera-debugsourceUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-connector-c-debuginfoUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-connector-c-config | Dec 21, 2020 | May 20, 2020 |
| Rocky_linux | — | Upgrade JudyUpgrade mariadb-connector-c-debuginfoUpgrade mariadb-connector-c-develUpgrade mariadb-connector-cUpgrade Judy-debugsourceUpgrade mariadb-connector-c-devel-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-connector-c-debugsource | Mar 12, 2024 | May 20, 2020 |
| Suse | — | Upgrade mariadb-clientUpgrade mariadbUpgrade libmariadbd-develUpgrade libmariadbd19Upgrade libmariadb3-32bitUpgrade libmariadbprivateUpgrade libmysqld19Upgrade mariadb-testUpgrade libmariadb_pluginsUpgrade mariadb-galeraUpgrade mariadb-toolsUpgrade libmariadb-develUpgrade mariadb-errormessagesUpgrade libmysqld-develUpgrade libmariadb3Upgrade mariadb-bench | May 27, 2020 | May 20, 2020 |
| Ubuntu | — | Upgrade mariadb-server | Oct 28, 2020 | May 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub