Upstream information

CVE-2016-2047 at MITRE

Description

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

SUSE information

CVSS v2 Scores
  National Vulnerability Database
Base Score 4.30
Vector AV:N/AC:M/Au:N/C:N/I:P/A:N
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact None
Integrity Impact Partial
Availability Impact None
CVSS v3 Scores
  National Vulnerability Database
Base Score 5.9
Vector AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Access Vector Network
Access Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact High
Availability Impact None
SUSE Bugzilla entries: 963806 [RESOLVED / FIXED], 976341 [RESOLVED / FIXED], 980904 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 12
  • libmysqlclient18 >= 10.0.25-20.6.1
  • libmysqlclient18-32bit >= 10.0.25-20.6.1
  • libmysqlclient_r18 >= 10.0.25-20.6.1
  • libmysqlclient_r18-32bit >= 10.0.25-20.6.1
  • mariadb >= 10.0.25-20.6.1
  • mariadb-client >= 10.0.25-20.6.1
  • mariadb-errormessages >= 10.0.25-20.6.1
Patchnames:
SUSE-SLE-DESKTOP-12-2016-964
SUSE Linux Enterprise Desktop 12 SP1
  • libmysqlclient18 >= 10.0.25-6.1
  • libmysqlclient18-32bit >= 10.0.25-6.1
  • libmysqlclient_r18 >= 10.0.25-6.1
  • libmysqlclient_r18-32bit >= 10.0.25-6.1
  • mariadb >= 10.0.25-6.1
  • mariadb-client >= 10.0.25-6.1
  • mariadb-errormessages >= 10.0.25-6.1
Patchnames:
SUSE-SLE-DESKTOP-12-SP1-2016-963
SUSE Linux Enterprise Desktop 12 SP2
  • libmysqlclient18 >= 10.0.27-12.1
  • libmysqlclient18-32bit >= 10.0.27-12.1
  • libmysqlclient_r18 >= 10.0.27-12.1
  • libmysqlclient_r18-32bit >= 10.0.27-12.1
  • mariadb >= 10.0.27-12.1
  • mariadb-client >= 10.0.27-12.1
  • mariadb-errormessages >= 10.0.27-12.1
Patchnames:
SUSE Linux Enterprise Desktop 12 SP2 GA libmysqlclient18
SUSE Linux Enterprise Server 11 SP4
  • libmysql55client18 >= 5.5.49-0.20.1
  • libmysql55client18-32bit >= 5.5.49-0.20.1
  • libmysql55client18-x86 >= 5.5.49-0.20.1
  • libmysql55client_r18 >= 5.5.49-0.20.1
  • libmysql55client_r18-32bit >= 5.5.49-0.20.1
  • libmysql55client_r18-x86 >= 5.5.49-0.20.1
  • mysql >= 5.5.49-0.20.1
  • mysql-client >= 5.5.49-0.20.1
  • mysql-tools >= 5.5.49-0.20.1
Patchnames:
slessp4-mysql-12554
SUSE Linux Enterprise Server 12
  • libmysqlclient18 >= 10.0.25-20.6.1
  • libmysqlclient18-32bit >= 10.0.25-20.6.1
  • mariadb >= 10.0.25-20.6.1
  • mariadb-client >= 10.0.25-20.6.1
  • mariadb-errormessages >= 10.0.25-20.6.1
  • mariadb-tools >= 10.0.25-20.6.1
Patchnames:
SUSE-SLE-SERVER-12-2016-964
SUSE Linux Enterprise Server 12 SP1
  • libmysqlclient18 >= 10.0.25-6.1
  • libmysqlclient18-32bit >= 10.0.25-6.1
  • mariadb >= 10.0.25-6.1
  • mariadb-client >= 10.0.25-6.1
  • mariadb-errormessages >= 10.0.25-6.1
  • mariadb-tools >= 10.0.25-6.1
Patchnames:
SUSE-SLE-SERVER-12-SP1-2016-963
SUSE Linux Enterprise Server 12 SP2
  • libmysqlclient18 >= 10.0.27-12.1
  • libmysqlclient18-32bit >= 10.0.27-12.1
  • mariadb >= 10.0.27-12.1
  • mariadb-client >= 10.0.27-12.1
  • mariadb-errormessages >= 10.0.27-12.1
  • mariadb-tools >= 10.0.27-12.1
Patchnames:
SUSE Linux Enterprise Server 12 SP2 GA libmysqlclient18
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
  • libmysqlclient18 >= 10.0.27-12.1
  • mariadb >= 10.0.27-12.1
  • mariadb-client >= 10.0.27-12.1
  • mariadb-errormessages >= 10.0.27-12.1
  • mariadb-tools >= 10.0.27-12.1
Patchnames:
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 GA libmysqlclient18
SUSE Linux Enterprise Software Development Kit 11 SP4
  • libmysql55client_r18-32bit >= 5.5.49-0.20.1
  • libmysql55client_r18-x86 >= 5.5.49-0.20.1
  • mysql >= 5.5.49-0.20.1
Patchnames:
sdksp4-mysql-12554
SUSE Linux Enterprise Software Development Kit 12
  • libmysqlclient-devel >= 10.0.25-20.6.1
  • libmysqlclient_r18 >= 10.0.25-20.6.1
  • libmysqld-devel >= 10.0.25-20.6.1
  • libmysqld18 >= 10.0.25-20.6.1
  • mariadb >= 10.0.25-20.6.1
Patchnames:
SUSE-SLE-SDK-12-2016-964
SUSE Linux Enterprise Software Development Kit 12 SP1
  • libmysqlclient-devel >= 10.0.25-6.1
  • libmysqlclient_r18 >= 10.0.25-6.1
  • libmysqld-devel >= 10.0.25-6.1
  • libmysqld18 >= 10.0.25-6.1
  • mariadb >= 10.0.25-6.1
Patchnames:
SUSE-SLE-SDK-12-SP1-2016-963
SUSE Linux Enterprise Software Development Kit 12 SP2
  • libmysqlclient-devel >= 10.0.27-12.1
  • libmysqlclient_r18 >= 10.0.27-12.1
  • libmysqld-devel >= 10.0.27-12.1
  • libmysqld18 >= 10.0.27-12.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP2 GA libmysqlclient-devel
SUSE Linux Enterprise Workstation Extension 12
  • libmysqlclient_r18 >= 10.0.25-20.6.1
  • libmysqlclient_r18-32bit >= 10.0.25-20.6.1
  • mariadb >= 10.0.25-20.6.1
Patchnames:
SUSE-SLE-WE-12-2016-964
SUSE Linux Enterprise Workstation Extension 12 SP1
  • libmysqlclient_r18 >= 10.0.25-6.1
  • libmysqlclient_r18-32bit >= 10.0.25-6.1
  • mariadb >= 10.0.25-6.1
Patchnames:
SUSE-SLE-WE-12-SP1-2016-963
SUSE Linux Enterprise Workstation Extension 12 SP2
  • libmysqlclient_r18 >= 10.0.27-12.1
  • libmysqlclient_r18-32bit >= 10.0.27-12.1
Patchnames:
SUSE Linux Enterprise Workstation Extension 12 SP2 GA libmysqlclient_r18
openSUSE 13.2
  • libmysql56client18 >= 5.6.30-2.20.2
  • libmysql56client18-32bit >= 5.6.30-2.20.2
  • libmysql56client18-debuginfo >= 5.6.30-2.20.2
  • libmysql56client18-debuginfo-32bit >= 5.6.30-2.20.2
  • libmysql56client_r18 >= 5.6.30-2.20.2
  • libmysql56client_r18-32bit >= 5.6.30-2.20.2
  • libmysqlclient-devel >= 10.0.25-2.24.1
  • libmysqlclient18 >= 10.0.25-2.24.1
  • libmysqlclient18-32bit >= 10.0.25-2.24.1
  • libmysqlclient18-debuginfo >= 10.0.25-2.24.1
  • libmysqlclient18-debuginfo-32bit >= 10.0.25-2.24.1
  • libmysqlclient_r18 >= 10.0.25-2.24.1
  • libmysqlclient_r18-32bit >= 10.0.25-2.24.1
  • libmysqld-devel >= 10.0.25-2.24.1
  • libmysqld18 >= 10.0.25-2.24.1
  • libmysqld18-debuginfo >= 10.0.25-2.24.1
  • mariadb >= 10.0.25-2.24.1
  • mariadb-bench >= 10.0.25-2.24.1
  • mariadb-bench-debuginfo >= 10.0.25-2.24.1
  • mariadb-client >= 10.0.25-2.24.1
  • mariadb-client-debuginfo >= 10.0.25-2.24.1
  • mariadb-debuginfo >= 10.0.25-2.24.1
  • mariadb-debugsource >= 10.0.25-2.24.1
  • mariadb-errormessages >= 10.0.25-2.24.1
  • mariadb-test >= 10.0.25-2.24.1
  • mariadb-test-debuginfo >= 10.0.25-2.24.1
  • mariadb-tools >= 10.0.25-2.24.1
  • mariadb-tools-debuginfo >= 10.0.25-2.24.1
  • mysql-community-server >= 5.6.30-2.20.2
  • mysql-community-server-bench >= 5.6.30-2.20.2
  • mysql-community-server-bench-debuginfo >= 5.6.30-2.20.2
  • mysql-community-server-client >= 5.6.30-2.20.2
  • mysql-community-server-client-debuginfo >= 5.6.30-2.20.2
  • mysql-community-server-debuginfo >= 5.6.30-2.20.2
  • mysql-community-server-debugsource >= 5.6.30-2.20.2
  • mysql-community-server-errormessages >= 5.6.30-2.20.2
  • mysql-community-server-test >= 5.6.30-2.20.2
  • mysql-community-server-test-debuginfo >= 5.6.30-2.20.2
  • mysql-community-server-tools >= 5.6.30-2.20.2
  • mysql-community-server-tools-debuginfo >= 5.6.30-2.20.2
Patchnames:
openSUSE-2016-607
openSUSE-2016-761
openSUSE Leap 42.1
  • libmysql56client18 >= 5.6.30-16.2
  • libmysql56client18-32bit >= 5.6.30-16.2
  • libmysql56client18-debuginfo >= 5.6.30-16.2
  • libmysql56client18-debuginfo-32bit >= 5.6.30-16.2
  • libmysql56client_r18 >= 5.6.30-16.2
  • libmysql56client_r18-32bit >= 5.6.30-16.2
  • libmysqlclient-devel >= 10.0.25-6.1
  • libmysqlclient18 >= 10.0.25-6.1
  • libmysqlclient18-32bit >= 10.0.25-6.1
  • libmysqlclient18-debuginfo >= 10.0.25-6.1
  • libmysqlclient18-debuginfo-32bit >= 10.0.25-6.1
  • libmysqlclient_r18 >= 10.0.25-6.1
  • libmysqlclient_r18-32bit >= 10.0.25-6.1
  • libmysqld-devel >= 10.0.25-6.1
  • libmysqld18 >= 10.0.25-6.1
  • libmysqld18-debuginfo >= 10.0.25-6.1
  • mariadb >= 10.0.25-6.1
  • mariadb-bench >= 10.0.25-6.1
  • mariadb-bench-debuginfo >= 10.0.25-6.1
  • mariadb-client >= 10.0.25-6.1
  • mariadb-client-debuginfo >= 10.0.25-6.1
  • mariadb-debuginfo >= 10.0.25-6.1
  • mariadb-debugsource >= 10.0.25-6.1
  • mariadb-errormessages >= 10.0.25-6.1
  • mariadb-test >= 10.0.25-6.1
  • mariadb-test-debuginfo >= 10.0.25-6.1
  • mariadb-tools >= 10.0.25-6.1
  • mariadb-tools-debuginfo >= 10.0.25-6.1
  • mysql-community-server >= 5.6.30-16.2
  • mysql-community-server-bench >= 5.6.30-16.2
  • mysql-community-server-bench-debuginfo >= 5.6.30-16.2
  • mysql-community-server-client >= 5.6.30-16.2
  • mysql-community-server-client-debuginfo >= 5.6.30-16.2
  • mysql-community-server-debuginfo >= 5.6.30-16.2
  • mysql-community-server-debugsource >= 5.6.30-16.2
  • mysql-community-server-errormessages >= 5.6.30-16.2
  • mysql-community-server-test >= 5.6.30-16.2
  • mysql-community-server-test-debuginfo >= 5.6.30-16.2
  • mysql-community-server-tools >= 5.6.30-16.2
  • mysql-community-server-tools-debuginfo >= 5.6.30-16.2
Patchnames:
openSUSE-2016-607
openSUSE-2016-780
openSUSE Leap 42.2
  • libmysqlclient-devel >= 10.0.27-13.1
  • libmysqlclient18 >= 10.0.27-13.1
  • libmysqlclient_r18 >= 10.0.27-13.1
  • libmysqld18 >= 10.0.27-13.1
  • mariadb >= 10.0.27-13.1
  • mariadb-client >= 10.0.27-13.1
  • mariadb-errormessages >= 10.0.27-13.1
Patchnames:
openSUSE Leap 42.2 GA libmysqlclient-devel
openSUSE Tumbleweed
  • libmysql56client18 >= 5.6.34-1.1
  • libmysql56client18-32bit >= 5.6.34-1.1
  • libmysql56client_r18 >= 5.6.34-1.1
  • libmysql56client_r18-32bit >= 5.6.34-1.1
  • mysql-community-server >= 5.6.34-1.1
  • mysql-community-server-bench >= 5.6.34-1.1
  • mysql-community-server-client >= 5.6.34-1.1
  • mysql-community-server-errormessages >= 5.6.34-1.1
  • mysql-community-server-test >= 5.6.34-1.1
  • mysql-community-server-tools >= 5.6.34-1.1
Patchnames:
openSUSE Tumbleweed GA libmysql56client18-32bit