37 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-107819
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C...
CVE-2026-107819
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
UBUNTU-CVE-2026-107819
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819
The MariaDB Connector/C library, specifically the libmariadb component, is vulnerable in versions 3.4.1 through 3.4.10 . The Zero-Configuration SSL authentication-switch logic fails to reject TLS hostname verification mismatches before selecting a non-hashing authentication plugin. This flaw allo...
EUVD-2026-95920
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819 MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819 MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819 MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819: Improper Validation of Certificate with Host Mismatch
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
PT-2026-109271
Name of the Vulnerable Software and Affected Versions MariaDB Connector/C versions 3.4.1 through 3.4.9 Description The libmariadb Zero-Configuration SSL authentication-switch logic fails to reject a TLS hostname verification mismatch before selecting a non-hashing authentication plugin. This allo...
libmariadb-devel-3.4.9-2.1 on GA media (moderate)
libmariadb-devel-3.4.9-2.1 on GA media Announcement ID: openSUSE-SU-2026:11721-1 Rating: moderate Cross-References: CVE-2026-44172 CVSS scores: CVE-2026-44172 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...
OPENSUSE-SU-2026:11721-1 libmariadb-devel-3.4.9-2.1 on GA media
These are all security issues fixed in the libmariadb-devel-3.4.9-2.1 package on the GA media of openSUSE Tumbleweed...
MariaDB: libmariadb ( mariadb-connector-c ): stack overflow via server-controlled field->length in prepared-statement codec
A stack overflow vulnerability was discovered in the prepared-statement codec of the database connector library. The vulnerability allowed a malicious database server or network attacker to crash client applications by sending specially crafted column-definition packets with excessively large...
Linux Distros Unpatched Vulnerability : CVE-2020-13249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although...
Debian dla-4074 : libmariadb-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4074 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4074-1 [email protected] https://www.debian.org/lts/security/...
Debian dla-3891 : libmariadb-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3891 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3891-1 [email protected] https://www.debian.org/lts/security/...
OPENSUSE-SU-2024:11039-1 libmariadb-devel-3.2.3-2.2 on GA media
These are all security issues fixed in the libmariadb-devel-3.2.3-2.2 package on the GA media of openSUSE Tumbleweed...
Debian dla-3722 : libmariadb-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3722 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3722-1 [email protected] https://www.debian.org/lts/security/...