libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade JudyUpgrade mariadb-connector-c-develUpgrade mariadb-connector-c-configUpgrade mariadb-connector-c | May 4, 2022 | May 20, 2020 |
| Alpine Linux | — | Upgrade mariadb-connector-c | Jan 4, 2021 | May 20, 2020 |
| Centos_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-connector-c-develUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-connector-c-debuginfoUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-connector-c-devel-debuginfoUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-connector-cUpgrade mariadb-commonUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadb-connector-c-configUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-connector-c-debugsource | Dec 21, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-connector-cUpgrade mariadb-connector-c-configUpgrade mariadb-connector-c-devel | Aug 31, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade mariadb-connector-c | Nov 3, 2020 | May 20, 2020 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 20, 2020 |
| Oracle_linux | — | Upgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-connector-cUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-connector-c-develUpgrade mariadb-errmsgUpgrade Judy-develUpgrade mariadb-server-utilsUpgrade asio-develUpgrade mariadb-backupUpgrade mariadb-connector-c-configUpgrade mariadb-develUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade JudyUpgrade mariadb-common | Dec 18, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-connector-cUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-connector-c-develUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-connector-c-configUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-connector-c-debuginfoUpgrade galeraUpgrade mariadb-connector-c-debugsourceUpgrade mariadb-develUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-backup | Dec 21, 2020 | May 20, 2020 |
| Rocky_linux | — | Upgrade Judy-debuginfoUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-connector-c-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-connector-cUpgrade mariadb-connector-c-develUpgrade JudyUpgrade mariadb-connector-c-debuginfo | Mar 12, 2024 | May 20, 2020 |
| Suse | — | Upgrade libmariadbd19Upgrade mariadbUpgrade mariadb-clientUpgrade libmariadbd-develUpgrade libmysqld-develUpgrade mariadb-benchUpgrade mariadb-galeraUpgrade libmysqld19Upgrade mariadb-toolsUpgrade libmariadb-develUpgrade mariadb-errormessagesUpgrade libmariadb3-32bitUpgrade libmariadb3Upgrade libmariadbprivateUpgrade libmariadb_pluginsUpgrade mariadb-test | May 27, 2020 | May 20, 2020 |
| Ubuntu | — | Upgrade mariadb-server | Oct 28, 2020 | May 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub