CVE-2020-13249

Name of the Vulnerable Software and Affected Versions MariaDB Connector/C versions prior to 3.1.8

Description The issue is related to the improper validation of the content of an OK packet received from a server in the libmariadb/mariadb lib.c file. This problem does not affect any MySQL components supported by Oracle, despite the code originally being based on MySQL.

Recommendations For versions prior to 3.1.8, update to version 3.1.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the libmariadb/mariadb lib.c file until a patch is available.