Homepage

Improper Input Validation The advisory has been revoked - it doesn't affect any version of package mariadb-test  (opens in a new tab)

Threat Intelligence

EPSS
2.3% (84th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL8-MARIADBTEST-1463336
  • published26 Jul 2021
  • disclosed20 May 2020
Report a new vulnerability Found a mistake?

Introduced: 20 May 2020

CVE-2020-13249  (opens in a new tab)
CWE-20  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mariadb-test package and not the mariadb-test package as distributed by RHEL.

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.

References