CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23,...

Security readout for executives and security teams

Some MariaDB, Oracle MySQL, and Percona Server client code did not correctly confirm that a TLS certificate belonged to the database server being contacted. An attacker able to intercept network traffic could impersonate an SSL database server with a crafted certificate field and potentially expose or alter database traffic. Exposure is most likely in older MariaDB clients before 5.5.47, 10.0.23, or 10.1.10, Oracle MySQL client versions listed in the CVE, and Percona deployments using affected client code. Risk requires TLS database connections and a network position enabling man-in-the-middle interception. Treat this as a targeted remediation item for legacy database clients. It is not KEV-listed and needs network interception, but affected clients can undermine database TLS trust, which matters for regulated or sensitive data paths. Mitigation focus: Upgrade MariaDB clients to 5.5.47, 10.0.23, 10.1.10, or later.; Apply Oracle MySQL fixes from the relevant Oracle security advisory.; Check Percona vendor guidance for affected and fixed builds..

Prepared

Jun 13, 2026, 21:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.