Search/CVE-2020-13249

● CVE — High

CVE-2020-13249

Vendorfedoraproject, opensuse, mariadbProductfedora, leap, connector/cDiscoveredMay 20, 2020UpdatedNov 21, 2024

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.

View graph Watch Export

CVSS v3.1

8.8 HIGH

EPSS

2.40%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Related IOCs

0

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 6, 2026

▼ 0.38pp

2.78% → 2.40% over 4 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Connections

3 relationships

Timeline

disclosure → media coverage

May 20, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024