Details
Critical Description
ssl_verify_server_cert() function parses the output of X509_NAME_oneline() to get the value of the /CN=... field. But if this string — "/CN=" — is present as a part of the value of some other field that might cause the output to be parsed incorrectly. See https://wiki.openssl.org/index.php/Hostname_validation for examples of correct hostname validation.
Attachments
Issue Links
- links to
Activity
| Field | Original Value | New Value |
|---|---|---|
| Labels | upstream |
| Status | Open [ 1 ] | In Progress [ 3 ] |
| Assignee | Sergei Golubchik [ serg ] |
| Fix Version/s | 5.5.47 [ 20300 ] | |
| Fix Version/s | 10.0.23 [ 20401 ] | |
| Fix Version/s | 10.1.10 [ 20402 ] | |
| Fix Version/s | 5.5 [ 15800 ] | |
| Fix Version/s | 10.0 [ 16000 ] | |
| Fix Version/s | 10.1 [ 16100 ] | |
| Resolution | Fixed [ 1 ] | |
| Status | In Progress [ 3 ] | Closed [ 6 ] |
| Remote Link | This issue links to "CVE-2016-2047 (Web Link)" [ 26705 ] |
| Workflow | MariaDB v3 [ 72809 ] | MariaDB v4 [ 149876 ] |