Tag Archives: OpenSSL

MariaDB itself is NOT affected by the DROWN vulnerability

Written by Written by rasmus

Recently a serious vulnerability called DROWN was found. The vulnerability exists in systems that support SSLv2. There is flaw in SSLv2 that could be used to decrypt information over newer SSL protocols such as TLS. More information about the DROWN vulnerability with CVE number CVE-2016-0800 can be found here:

Last December Sergei Golubchik wrote a blog post about The State of SSL in MariaDB, which explains what versions of SSL cryptography is used in which MariaDB version and what is inherited from MySQL. …

Continue reading “MariaDB itself is NOT affected by the DROWN vulnerability”