ALPINE-CVE-2020-13249

ALPINE-CVE-2020-13249 PUBLISHED CVSS 8.800000190734863 HIGH

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.

Risk Scores

CVSS v3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.9	mariadb-connector-c	3.0.8-r0, 3.0.5-r1, 3.0.5-r0
Alpine:v3.10	mariadb-connector-c	0, 3.0.9-r0, 0
Alpine:v3.11	mariadb-connector-c	3.1.3-r0, 3.1.3-r1, 3.1.5-r0

Timeline

May 20, 2020 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2020-13249 advisory

Open in Interactive Console →