Red Hat Security Advisory

RHSA-2020:5655

mariadb-connector-c security, bug fix, and enhancement update

Released 2020-12-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 8.2) mariadb-connector-c-3.1.11-2.el8_2, mariadb-connector-c-config-3.1.11-2.el8_2, mariadb-connector-c-devel-3.1.11-2.el8_2

TI-2020-10378 CVE-2020-13249 · GHSA-44c7-hc99-224f

MEDIUM 43

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02396 Published 2020-05-20 Fixed

TI-2020-02277 CVE-2020-2574 · GHSA-33hv-cjr4-37wm

LOW 33

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03514 Published 2020-01-15 Partial fix

TI-2020-02453 CVE-2020-2752 · GHSA-vcxq-55mq-gj87

LOW 29

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02336 Published 2020-04-15 Partial fix

TI-2021-01693 CVE-2021-2007 · GHSA-62m3-j4w3-p5mw

LOW 22

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02308 Published 2021-01-20 Partial fix

TI-2020-02617 CVE-2020-2922 · GHSA-95hr-j7p7-26x4

LOW 22

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02518 Published 2020-04-15 Partial fix