MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname verification mismatch before selecting a non-hashing authentication plugin. An active man-in-the-middle attacker with a valid certificate for another hostname could request mysql_clear_password and obtain the database password inside the attacker-controlled TLS connection.
Other MariaDB connectors are not affected. This issue is fixed in version 3.4.10.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
References 4
https://github.com/MariaDB/server/security/advisories/GHSA-fmq9-qjxj-qpf7
security-advisories@github.com
https://github.com/mariadb-corporation/mariadb-connector-c/commit/e8c0a16d94ddf…
security-advisories@github.com
https://github.com/mariadb-corporation/mariadb-connector-c/releases/tag/v3.4.10
security-advisories@github.com
https://jira.mariadb.org/browse/CONC-846
security-advisories@github.com