Description
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname verification mismatch before selecting a non-hashing authentication plugin. An active man-in-the-middle attacker with a valid certificate for another hostname could request mysql_clear_password and obtain the database password inside the attacker-controlled TLS connection. Other MariaDB connectors are not affected. This issue is fixed in version 3.4.10.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MariaDB server
>= 3.4.1, < 3.4.10affected
References
- https://github.com/MariaDB/server/security/advisories/GHSA-fmq9-qjxj-qpf7 ↗
- https://github.com/mariadb-corporation/mariadb-connector-c/commit/e8c0a16d94ddf844668d684a7d42b37ac8e0fc02 ↗
- https://github.com/mariadb-corporation/mariadb-connector-c/releases/tag/v3.4.10 ↗
- https://jira.mariadb.org/browse/CONC-846 ↗