Vulnetix
Try Vulnetix Request Demo
CVE-2020-13249 PUBLISHED

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.

EPSS 0.70% · 71.9th percentile

Risk Scores

EPSS Score
0.70%
71.9th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSmariadb-10.30, 1:10.3.22-1ubuntu1, 1:10.3.22-1
Ubuntu:18.04:LTSmariadb-10.110.1.25-1, 0, 1:10.1.29-6
Ubuntu:16.04:LTSmariadb-10.010.0.20-0ubuntu0.15.04.1, 10.0.27-0ubuntu0.16.04.1, 10.0.25-0ubuntu0.16.04.1

Timeline

References

Open in Interactive Console →