Uploaded image for project: 'MariaDB Connector/C'
  1. MariaDB Connector/C
  2. CONC-429

libmariadb allows invalid plugin names

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 3.1
    • Fix Version/s: 3.1.3
    • Labels:
      None

      Description

      During authentication the server tells client what plugin to load.

      The client does not sanitize plugin names as they're coming from the server.

        Attachments

          Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-20110 libmysqlclient allows invalid plugin names

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          links to

          Web Link Path traversal in command line client

            Activity

              People

              • Assignee:
                sanja Oleksandr Byelkin
                Reporter:
                serg Sergei Golubchik
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: