The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-mariadb | Aug 30, 2017 | Jan 20, 2016 |
| Amazon_linux | — | amazon-linux-upgrade-mysql55amazon-linux-upgrade-mysql56 | May 18, 2016 | Jan 27, 2016 |
| Centos_linux | — | centos-upgrade-mariadbcentos-upgrade-mariadb-benchcentos-upgrade-mariadb-develcentos-upgrade-mariadb-embeddedcentos-upgrade-mariadb-embedded-develcentos-upgrade-mariadb-libscentos-upgrade-mariadb-servercentos-upgrade-mariadb-test | Jul 6, 2016 | Jan 27, 2016 |
| Debian | debian-upgrade-mariadb-10-0debian-upgrade-mysql-5-5 | Feb 2, 2016 | Jan 27, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Jul 26, 2016 | |
| Freebsd | freebsd-upgrade-package-mariadb55-serverfreebsd-upgrade-package-mariadb100-serverfreebsd-upgrade-package-mariadb101-serverfreebsd-upgrade-package-mysql55-serverfreebsd-upgrade-package-mysql56-serverfreebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-percona55-serverfreebsd-upgrade-package-percona-server | Dec 10, 2025 | Apr 30, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-mariadbhuawei-euleros-2_0_sp1-upgrade-mariadb-benchhuawei-euleros-2_0_sp1-upgrade-mariadb-develhuawei-euleros-2_0_sp1-upgrade-mariadb-embeddedhuawei-euleros-2_0_sp1-upgrade-mariadb-libshuawei-euleros-2_0_sp1-upgrade-mariadb-serverhuawei-euleros-2_0_sp1-upgrade-mariadb-test | Nov 30, 2017 | Jan 27, 2016 | |
| Mariadb Mariadb | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | mariadb-mariadb-upgrade-latest | Mar 4, 2025 | Jan 27, 2016 |
| Oracle Mysql | mysql-upgrade-latest | Apr 28, 2016 | Jan 27, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-mariadboracle-linux-upgrade-mariadb-benchoracle-linux-upgrade-mariadb-develoracle-linux-upgrade-mariadb-embeddedoracle-linux-upgrade-mariadb-embedded-develoracle-linux-upgrade-mariadb-libsoracle-linux-upgrade-mariadb-serveroracle-linux-upgrade-mariadb-test | Apr 7, 2016 | Jan 27, 2016 |
| Suse | — | suse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd19suse-upgrade-libmysql55client18suse-upgrade-libmysql55client18-32bitsuse-upgrade-libmysql55client18-x86suse-upgrade-libmysql55client_r18suse-upgrade-libmysql55client_r18-32bitsuse-upgrade-libmysql55client_r18-x86suse-upgrade-libmysqlclient-develsuse-upgrade-libmysqlclient18suse-upgrade-libmysqlclient18-32bitsuse-upgrade-libmysqlclient_r18suse-upgrade-libmysqlclient_r18-32bitsuse-upgrade-libmysqld-develsuse-upgrade-libmysqld18suse-upgrade-libmysqld19suse-upgrade-mariadbsuse-upgrade-mariadb-100-errormessagessuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-toolssuse-upgrade-mysqlsuse-upgrade-mysql-clientsuse-upgrade-mysql-tools | May 11, 2016 | Jan 27, 2016 |
| Ubuntu | ubuntu-upgrade-mysql-server-5-5ubuntu-upgrade-mysql-server-5-6ubuntu-upgrade-mysql-server-5-7 | Apr 21, 2016 | Jan 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub