CVE catalog
CVE-2020-13249
ALPINE-CVE-2020-13249
- Severity
- High · CVSS 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.40% · Oct 25, 2026
libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Alpine | mariadb-connector-c | 3.10 | 3.0.10-r1 | fixed |
| Alpine | mariadb-connector-c | 3.11 | 3.1.6-r1 | fixed |
| Alpine | mariadb-connector-c | 3.9 | 3.0.8-r1 | fixed |
| Ubuntu | mariadb-10.1 | 18.04 | 10.1.25-1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.29-6 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.34-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.38-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.38-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.40-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.41-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.43-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.44-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.47-0ubuntu0.18.04.1 | fixed |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.17-1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.18-1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.19-1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.21-2 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.22-1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.22-1ubuntu1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.25-0ubuntu0.20.04.1 | fixed |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.20-0ubuntu0.15.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.22-0ubuntu1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.23-1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.23-2 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.24-7 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.25-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.27-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.28-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.29-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.31-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.33-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.34-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.36-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mariadb-10.0 | 16.04 | 10.0.38-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 10.1.25-1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.29-6 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.34-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.38-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.38-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.40-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.41-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.43-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.44-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | mariadb-10.1 | 18.04 | 1:10.1.47-0ubuntu0.18.04.1 | fixed |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.17-1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.18-1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.19-1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.21-2 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.22-1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.22-1ubuntu1 | vulnerable |
| Ubuntu | mariadb-10.3 | 20.04 | 1:10.3.25-0ubuntu0.20.04.1 | fixed |
| Suse | mariadb | linux enterprise module for server applications 15 sp1 | 10.2.32-3.29.2 | fixed |
| Suse | mariadb-connector-c | linux enterprise server 12 sp4 | 3.1.8-2.15.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise server for sap applications 12 sp4 | 3.1.8-2.15.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise server 12 sp5 | 3.1.8-2.15.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise server for sap applications 12 sp5 | 3.1.8-2.15.1 | fixed |
| Opensuse | mariadb | leap 15.1 | 10.2.32-lp151.2.15.1 | fixed |
| Suse | mariadb | openstack cloud 7 | 10.2.36-19.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise module for basesystem 15 sp1 | 3.1.8-3.18.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise module for server applications 15 sp1 | 3.1.8-3.18.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise high performance computing 15-espos | 3.1.8-3.18.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise high performance computing 15-ltss | 3.1.8-3.18.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise server 15-ltss | 3.1.8-3.18.1 | fixed |
| Suse | mariadb-connector-c | linux enterprise server for sap applications 15 | 3.1.8-3.18.1 | fixed |
| Opensuse | mariadb-connector-c | leap 15.1 | 3.1.8-lp151.3.12.1 | fixed |
| Suse | mariadb | openstack cloud 9 | 10.2.32-3.28.2 | fixed |
| Suse | mariadb | openstack cloud crowbar 9 | 10.2.32-3.28.2 | fixed |
| Suse | mariadb | linux enterprise server 12 sp4 | 10.2.32-3.28.2 | fixed |
| Suse | mariadb | linux enterprise server for sap applications 12 sp4 | 10.2.32-3.28.2 | fixed |
| Suse | mariadb | linux enterprise server 12 sp5 | 10.2.32-3.28.2 | fixed |
| Suse | mariadb | linux enterprise server for sap applications 12 sp5 | 10.2.32-3.28.2 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Alpine | mariadb-connector-c | apk | 3.10 | 3.0.10-r1 | Not reported | ALPINE-CVE-2020-13249 | Not reported |
| Alpine | mariadb-connector-c | apk | 3.11 | 3.1.6-r1 | Not reported | ALPINE-CVE-2020-13249 | Not reported |
| Alpine | mariadb-connector-c | apk | 3.9 | 3.0.8-r1 | Not reported | ALPINE-CVE-2020-13249 | Not reported |
| Ubuntu | mariadb-10.1 | deb | 18.04 | 1:10.1.47-0ubuntu0.18.04.1 | Not reported | USN-4603-1 | Not reported |
| Ubuntu | mariadb-10.3 | deb | 20.04 | 1:10.3.25-0ubuntu0.20.04.1 | Not reported | USN-4603-1 | Not reported |
| Ubuntu | mariadb-10.1 | deb | 18.04 | 1:10.1.47-0ubuntu0.18.04.1 | Not reported | UBUNTU-CVE-2020-13249 | Not reported |
| Ubuntu | mariadb-10.3 | deb | 20.04 | 1:10.3.25-0ubuntu0.20.04.1 | Not reported | UBUNTU-CVE-2020-13249 | Not reported |
| Suse | mariadb | rpm | linux enterprise module for server applications 15 sp1 | 10.2.32-3.29.2 | Not reported | SUSE-SU-2020:1711-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise server 12 sp4 | 3.1.8-2.15.1 | Not reported | SUSE-SU-2020:1431-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise server for sap applications 12 sp4 | 3.1.8-2.15.1 | Not reported | SUSE-SU-2020:1431-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise server 12 sp5 | 3.1.8-2.15.1 | Not reported | SUSE-SU-2020:1431-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise server for sap applications 12 sp5 | 3.1.8-2.15.1 | Not reported | SUSE-SU-2020:1431-1 | Not reported |
| Opensuse | mariadb | rpm | leap 15.1 | 10.2.32-lp151.2.15.1 | Not reported | OPENSUSE-SU-2020:0870-1 | Not reported |
| Suse | mariadb | rpm | openstack cloud 7 | 10.2.36-19.1 | Not reported | SUSE-SU-2020:3625-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise module for basesystem 15 sp1 | 3.1.8-3.18.1 | Not reported | SUSE-SU-2020:1423-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise module for server applications 15 sp1 | 3.1.8-3.18.1 | Not reported | SUSE-SU-2020:1423-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise high performance computing 15-espos | 3.1.8-3.18.1 | Not reported | SUSE-SU-2020:1423-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise high performance computing 15-ltss | 3.1.8-3.18.1 | Not reported | SUSE-SU-2020:1423-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise server 15-ltss | 3.1.8-3.18.1 | Not reported | SUSE-SU-2020:1423-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise server for sap applications 15 | 3.1.8-3.18.1 | Not reported | SUSE-SU-2020:1423-1 | Not reported |
| Opensuse | mariadb-connector-c | rpm | leap 15.1 | 3.1.8-lp151.3.12.1 | Not reported | OPENSUSE-SU-2020:0738-1 | Not reported |
| Suse | mariadb | rpm | openstack cloud 9 | 10.2.32-3.28.2 | Not reported | SUSE-SU-2020:1710-1 | Not reported |
| Suse | mariadb | rpm | openstack cloud crowbar 9 | 10.2.32-3.28.2 | Not reported | SUSE-SU-2020:1710-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise server 12 sp4 | 10.2.32-3.28.2 | Not reported | SUSE-SU-2020:1710-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise server for sap applications 12 sp4 | 10.2.32-3.28.2 | Not reported | SUSE-SU-2020:1710-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise server 12 sp5 | 10.2.32-3.28.2 | Not reported | SUSE-SU-2020:1710-1 | Not reported |
| Suse | mariadb | rpm | linux enterprise server for sap applications 12 sp5 | 10.2.32-3.28.2 | Not reported | SUSE-SU-2020:1710-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2020_5500.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2020-13249]
- [https://osv.dev/vulnerability/SUSE-SU-2020:1423-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:1431-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:1710-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:1711-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:3625-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2020-13249]
- [https://osv.dev/vulnerability/USN-4603-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:0738-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:0870-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-13249.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]