NVD

Id
18354  
Name
CVE-2016-2047  
Description
The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject"s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-01-27  
Modified Date
2016-12-02  
Seq
2016-2047  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101561 18354 CVE-2016-2047 SUSE-SU-2016:1279  View
101562 18354 CVE-2016-2047 openSUSE-SU-2016:1332  View
101563 18354 CVE-2016-2047 SUSE-SU-2016:1619  View
101564 18354 CVE-2016-2047 SUSE-SU-2016:1620  View
101565 18354 CVE-2016-2047 openSUSE-SU-2016:1664  View
101566 18354 CVE-2016-2047 openSUSE-SU-2016:1686  View
101567 18354 CVE-2016-2047 RHSA-2016:0534  View
101568 18354 CVE-2016-2047 RHSA-2016:0705  View
101569 18354 CVE-2016-2047 DSA-3453  View
101570 18354 CVE-2016-2047 DSA-3557  View
101571 18354 CVE-2016-2047 [oss-security] 20160126 Flaw in mariadb clients SSL certificate validation  View
101572 18354 CVE-2016-2047 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
101573 18354 CVE-2016-2047 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
101574 18354 CVE-2016-2047 81810  View
101575 18354 CVE-2016-2047 1035606  View
101576 18354 CVE-2016-2047 USN-2953-1  View
101577 18354 CVE-2016-2047 USN-2954-1  View
101578 18354 CVE-2016-2047 https://mariadb.atlassian.net/browse/MDEV-9212  View
101579 18354 CVE-2016-2047 https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/  View
101580 18354 CVE-2016-2047 https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/  View
101581 18354 CVE-2016-2047 https://mariadb.com/kb/en/mdb-10023-rn/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
575 JVNDB-2016-001348 MariaDB などの製品の sql-common/client.c の ssl_verify_server_cert 関数における SSL サーバになりすまされる脆弱性 MariaDB、Oracle MySQL、および Percona Server の sql-common/client.c の ssl_verify_server_cert 関数は、サーバのホスト名が X.509 証明書のサブジェクトの Common Name (CN) または subjectAltName フィールドのドメイン名と一致することを適切に検証しないため、SSL サーバになりすまされる脆弱性が存在します。 CVE-2016-2047 88553 CVE-2016-2047 18354 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001348.html 2016-01-26 2016-12-09 View