Is CVE-2016-2047 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 4%.

What products does CVE-2016-2047 affect?

Tracked products affected include MySQL, Ubuntu. Check the version you run to see whether it is affected.

How do I fix CVE-2016-2047?

Apply the vendor fix in your normal patch cycle. Upgrade affected products to a fixed version.

CVE-2016-2047

Q: What is CVE-2016-2047?

CVE-2016-2047 is a medium-severity software vulnerability (CWE-254) with a CVSS score of 5.9. The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not pr

MEDIUM severity · CVSS 5.9 · CWE-254

5.9CVSS MEDIUM

Summary

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

Impact & exploitability

Attack vectorNetwork

Attack complexityHigh

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactHigh

Availability impactNone

Exploit probability (EPSS)4%

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products we track (2)

MySQL Ubuntu

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

CVE-2016-2047

Summary

Impact & exploitability

Affected products we track (2)

Recommendation

Additional information