CVE-2020-13249

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.

• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00064.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00054.htmlBroken Link, Mailing List, Third Party Advisory
• https://github.com/mariadb-corporation/mariadb-connector-c/commit/2759b87d72926b7c9b5426437a7c8dd15ff57945Patch, Third Party Advisory
• https://github.com/mariadb-corporation/mariadb-connector-c/compare/v3.1.7...v3.1.8Release Notes, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW2ED32VEUHXFN2J3YQE27JIBV4SC2PI/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4X2BMF3EILMTXGOZDTPYS3KT5VWLA2P/
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00064.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00054.htmlBroken Link, Mailing List, Third Party Advisory
• https://github.com/mariadb-corporation/mariadb-connector-c/commit/2759b87d72926b7c9b5426437a7c8dd15ff57945Patch, Third Party Advisory
• https://github.com/mariadb-corporation/mariadb-connector-c/compare/v3.1.7...v3.1.8Release Notes, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW2ED32VEUHXFN2J3YQE27JIBV4SC2PI/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4X2BMF3EILMTXGOZDTPYS3KT5VWLA2P/

Published

May 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13240The DMS/ECM module in Dolibarr 11.0.4 allows users with the …5.4
• CVE-2020-13241Microweber 1.1.18 allows Unrestricted File Upload because ad…7.8
• CVE-2020-13245Certain NETGEAR devices are affected by Missing SSL Certific…5.9
• CVE-2020-13246An issue was discovered in Gitea through 1.11.5. An attacker…7.5
• CVE-2020-13247BooleBox Secure File Sharing Utility before 4.2.3.0 allows C…7.3
• CVE-2020-13248BooleBox Secure File Sharing Utility before 4.2.3.0 allows s…5.4
• CVE-2020-1325Azure DevOps Server and Team Foundation Services Spoofing Vu…5.4
• CVE-2020-13250HashiCorp Consul and Consul Enterprise include an HTTP API (…7.5
• CVE-2020-13252Centreon before 19.04.15 allows remote attackers to execute …8.8
• CVE-2020-13253sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated a…5.5
• CVE-2020-13254An issue was discovered in Django 2.2 before 2.2.13 and 3.0 …5.9
• CVE-2020-13258Contentful through 2020-05-21 for Python allows reflected XS…6.1