CVE-2020-13249

2020-05-2000:00:00

ubuntu.com

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.0%

JSON

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not
properly validate the content of an OK packet received from a server. NOTE:
although mariadb_lib.c was originally based on code shipped for MySQL, this
issue does not affect any MySQL components supported by Oracle.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchmariadb-10.0< anyUNKNOWN
ubuntu18.04noarchmariadb-10.1< 1:10.1.47-0ubuntu0.18.04.1UNKNOWN
ubuntu20.04noarchmariadb-10.3< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	16.04	noarch	mariadb-10.0	< any	UNKNOWN
ubuntu	18.04	noarch	mariadb-10.1	< 1:10.1.47-0ubuntu0.18.04.1	UNKNOWN
ubuntu	20.04	noarch	mariadb-10.3	< 1:10.3.25-0ubuntu0.20.04.1	UNKNOWN