Homepage

Improper Certificate Validation The advisory has been revoked - it doesn't affect any version of package mariadb-galera.src  (opens in a new tab)

Threat Intelligence

EPSS
1.75% (83rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-MARIADBGALERASRC-12613821
  • published11 Sept 2025
  • disclosed1 Jan 2016
Report a new vulnerability Found a mistake?

Introduced: 1 Jan 2016

CVE-2016-2047  (opens in a new tab)
CWE-295  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mariadb-galera.src package and not the mariadb-galera.src package as distributed by RHEL.

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

References