NetSight
IP …
medium5.9

CVE-2016-2047

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and …

Impact

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

Affected products

VendorProductAffected versions
MariadbMariadb
from 5.5.20 before 5.5.47
from 10.0.0 before 10.0.23
from 10.1.0 before 10.1.10
OracleLinux
Version 7
OracleMysql
from 5.5.0 through 5.5.48
from 5.6.0 through 5.6.29
from 5.7.0 through 5.7.11
OpensuseLeap
Version 42.1
RedhatEnterprise Linux
Versions 6.0, 7.0
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04

Weakness classification

CWE-254

References