CVE-2016-2047
Fixed in a distro release EPSS 4%
The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."
Products: mariadb, oracle linux, oracle mysql, opensuse leap, redhat enterprise_linux, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | mysql-5.5 | 5.5.49-0+deb7u1 |
| Debian 8 | mariadb-10.0 | 10.0.23-0+deb8u1 |
| Debian 8 | mysql-5.5 | 5.5.49-0+deb8u1 |
| Red Hat Enterprise Linux 7 | mariadb | 1:5.5.47-1.el7_2 |
| Red Hat Enterprise Linux 7 | mariadb-bench | 1:5.5.47-1.el7_2 |
| Red Hat Enterprise Linux 7 | mariadb-debuginfo | 1:5.5.47-1.el7_2 |
| Red Hat Enterprise Linux 7 | mariadb-devel | 1:5.5.47-1.el7_2 |
| Red Hat Enterprise Linux 7 | mariadb-embedded | 1:5.5.47-1.el7_2 |
| Red Hat Enterprise Linux 7 | mariadb-embedded-devel | 1:5.5.47-1.el7_2 |
| Red Hat Enterprise Linux 7 | mariadb-libs | 1:5.5.47-1.el7_2 |
| Red Hat Enterprise Linux 7 | mariadb-server | 1:5.5.47-1.el7_2 |
| Red Hat Enterprise Linux 7 | mariadb-test | 1:5.5.47-1.el7_2 |
| Red Hat rhel software collections 2 | mariadb55-mariadb | 0:5.5.49-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb | 0:5.5.49-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-bench | 0:5.5.49-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-bench | 0:5.5.49-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-debuginfo | 0:5.5.49-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-debuginfo | 0:5.5.49-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-devel | 0:5.5.49-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-devel | 0:5.5.49-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-libs | 0:5.5.49-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-libs | 0:5.5.49-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-server | 0:5.5.49-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-server | 0:5.5.49-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-test | 0:5.5.49-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-test | 0:5.5.49-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql | 0:5.5.50-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql | 0:5.5.50-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-bench | 0:5.5.50-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-bench | 0:5.5.50-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-debuginfo | 0:5.5.50-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-debuginfo | 0:5.5.50-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-devel | 0:5.5.50-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-devel | 0:5.5.50-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-libs | 0:5.5.50-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-libs | 0:5.5.50-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-server | 0:5.5.50-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-server | 0:5.5.50-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-test | 0:5.5.50-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-test | 0:5.5.50-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-bench | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-bench | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-common | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-common | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-config | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-config | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-debuginfo | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-debuginfo | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-devel | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-devel | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-errmsg | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-errmsg | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-server | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-server | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-test | 1:10.0.25-4.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-test | 1:10.0.25-4.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql | 0:5.6.30-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-bench | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-bench | 0:5.6.30-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-common | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-common | 0:5.6.30-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-config | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-config | 0:5.6.30-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-debuginfo | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-debuginfo | 0:5.6.30-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-devel | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-devel | 0:5.6.30-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-errmsg | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-errmsg | 0:5.6.30-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-server | 0:5.6.30-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-server | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-test | 0:5.6.30-1.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-test | 0:5.6.30-1.el7 |
| SUSE Linux Enterprise Desktop 12 | mariadb | 10.0.25-20.6.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | mariadb | 10.0.25-6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 11 SP4 | mysql | 5.5.49-0.20.1 |
| SUSE Linux Enterprise Server 12 | mariadb | 10.0.25-20.6.1 |
| SUSE Linux Enterprise Server 12 SP1 | mariadb | 10.0.25-6.1 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mysql | 5.5.49-0.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.25-20.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mariadb | 10.0.25-6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mysql | 5.5.49-0.20.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mariadb | 10.0.25-20.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | mariadb | 10.0.25-6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Workstation Extension 12 | mariadb | 10.0.25-20.6.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | mariadb | 10.0.25-6.1 |
| Ubuntu 14.04 LTS | mariadb-5.5 | 5.5.47-1ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.49-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | mysql-5.6 | 5.6.30-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | mysql-5.7 | 5.7.12-0ubuntu1 |
| Ubuntu 16.04 LTS | percona-server-5.6 | no fix |
| Ubuntu 16.04 LTS | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 |
| openSUSE Tumbleweed | mariadb | 10.6.4-2.1 |