Vulnerability CVE-2016-2047: Information

Description

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

Severity: MEDIUM (5.9) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2016-2047
Published: Jan. 27, 2016
Modified: Dec. 27, 2019
Error type identifier: CWE-254

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
MySQLsisyphus5.5.53-alt18.0.37-alt1.1ALT-PU-2016-2238-1171749Fixed
MySQLp105.5.53-alt18.0.36-alt1ALT-PU-2016-2238-1171749Fixed
MySQLp95.5.53-alt18.0.26-alt2ALT-PU-2016-2238-1171749Fixed
MySQLp85.5.54-alt0.M80P.15.7.28-alt1ALT-PU-2017-1409-1181264Fixed
MySQLc10f15.5.53-alt18.0.37-alt1ALT-PU-2016-2238-1171749Fixed
MySQLc9f25.5.53-alt18.0.36-alt0.c9.1ALT-PU-2016-2238-1171749Fixed
MySQLc75.5.53-alt0.M70C.15.7.24-alt0.M70C.1ALT-PU-2016-2259-1171748Fixed
MySQLp115.5.53-alt18.0.37-alt1.1ALT-PU-2016-2238-1171749Fixed
mariadbsisyphus10.1.10-alt110.11.8-alt1ALT-PU-2015-2203-1155443Fixed
mariadbp1010.1.10-alt110.6.18-alt1ALT-PU-2015-2203-1155443Fixed
mariadbp910.1.10-alt110.4.34-alt0.M90P.1ALT-PU-2015-2203-1155443Fixed
mariadbc10f110.1.10-alt110.6.18-alt1ALT-PU-2015-2203-1155443Fixed
mariadbc9f210.1.10-alt110.6.18-alt1ALT-PU-2015-2203-1155443Fixed
mariadbc710.3.14-alt0.M70C.110.3.14-alt0.M70C.1ALT-PU-2019-1992-1231405Fixed
mariadbp1110.1.10-alt110.11.8-alt1ALT-PU-2015-2203-1155443Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
[oss-security] 20160126 Flaw in mariadb clients SSL certificate validation
  • Mailing List
  • Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/
  • Vendor Advisory
DSA-3453
  • Third Party Advisory
https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/
  • Vendor Advisory
https://mariadb.atlassian.net/browse/MDEV-9212
  • Vendor Advisory
https://mariadb.com/kb/en/mdb-10023-rn/
  • Vendor Advisory
RHSA-2016:0534
  • Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
  • Patch
  • Vendor Advisory
openSUSE-SU-2016:1686
  • Third Party Advisory
RHSA-2016:0705
  • Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
  • Third Party Advisory
81810
  • Third Party Advisory
  • VDB Entry
SUSE-SU-2016:1620
  • Mailing List
  • Third Party Advisory
SUSE-SU-2016:1619
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2016:1664
  • Mailing List
  • Third Party Advisory
SUSE-SU-2016:1279
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2016:1332
  • Mailing List
  • Third Party Advisory
USN-2954-1
  • Third Party Advisory
1035606
  • Third Party Advisory
  • VDB Entry
DSA-3557
  • Third Party Advisory
USN-2953-1
  • Third Party Advisory
RHSA-2016:1132
  • Third Party Advisory
RHSA-2016:1481
  • Third Party Advisory
RHSA-2016:1480
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.0.0
      End excliding
      10.0.23
      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.1.0
      End excliding
      10.1.10
      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      5.5.20
      End excliding
      5.5.47

      Configuration 2

      cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*

      Configuration 3

      cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
      Start including
      5.6.0
      End including
      5.6.29
      cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
      Start including
      5.7.0
      End including
      5.7.11
      cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
      Start including
      5.5.0
      End including
      5.5.48

      Configuration 4

      cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

      Configuration 5

      cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

      Configuration 6

      cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

      Configuration 7

      cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top