EulerOS 2.0 SP8 mariadb vulnerabilitie
Reporter | Title | Published | Views | Family All 199 |
---|---|---|---|---|
![]() | Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2022-1939) | 22 Jun 202200:00 | – | openvas |
![]() | Slackware: Security Advisory (SSA:2022-044-01) | 21 Apr 202200:00 | – | openvas |
![]() | openSUSE: Security Advisory for mariadb (openSUSE-SU-2022:0726-1) | 5 Mar 202200:00 | – | openvas |
![]() | SUSE: Security Advisory (SUSE-SU-2022:0726-1) | 5 Mar 202200:00 | – | openvas |
![]() | SUSE: Security Advisory (SUSE-SU-2022:0725-1) | 5 Mar 202200:00 | – | openvas |
![]() | SUSE: Security Advisory (SUSE-SU-2022:0731-1) | 5 Mar 202200:00 | – | openvas |
![]() | SUSE: Security Advisory (SUSE-SU-2022:0782-1) | 10 Mar 202200:00 | – | openvas |
![]() | openSUSE: Security Advisory for mariadb (openSUSE-SU-2022:0731-1) | 5 Mar 202200:00 | – | openvas |
![]() | openSUSE: Security Advisory for mariadb (SUSE-SU-2022:0731-2) | 30 Apr 202200:00 | – | openvas |
![]() | Ubuntu: Security Advisory (USN-5305-1) | 1 Mar 202200:00 | – | openvas |
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(162459);
script_version("1.3");
script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/19");
script_cve_id(
"CVE-2021-46657",
"CVE-2021-46659",
"CVE-2021-46663",
"CVE-2021-46664",
"CVE-2021-46665",
"CVE-2021-46668",
"CVE-2022-27377"
);
script_name(english:"EulerOS 2.0 SP8 : mariadb (EulerOS-SA-2022-1939)");
script_set_attribute(attribute:"synopsis", value:
"The remote EulerOS host is missing multiple security updates.");
script_set_attribute(attribute:"description", value:
"According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by
the following vulnerabilities :
- get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER
BY. (CVE-2021-46657)
- MariaDB before 10.7.2 allows an application crash because it does not recognize that
SELECT_LEX::nest_level is local to each VIEW. (CVE-2021-46659)
- MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.
(CVE-2021-46663)
- MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.
(CVE-2021-46664)
- MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables
expectations. (CVE-2021-46665)
- MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that
improperly interact with storage-engine resource limitations for temporary data structures.
(CVE-2021-46668)
- MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component
Item_func_in::cleanup(), which is exploited via specially crafted SQL statements. (CVE-2022-27377)
Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security
advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional
issues.");
# https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2022-1939
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?2cbf4143");
script_set_attribute(attribute:"solution", value:
"Update the affected mariadb packages.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-27377");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2022/01/29");
script_set_attribute(attribute:"patch_publication_date", value:"2022/06/22");
script_set_attribute(attribute:"plugin_publication_date", value:"2022/06/22");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:mariadb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:mariadb-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:mariadb-devel");
script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:2.0");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Huawei Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/sp");
script_exclude_keys("Host/EulerOS/uvp_version");
exit(0);
}
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var release = get_kb_item("Host/EulerOS/release");
if (isnull(release) || release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS");
var uvp = get_kb_item("Host/EulerOS/uvp_version");
if (release !~ "^EulerOS release 2\.0(\D|$)") audit(AUDIT_OS_NOT, "EulerOS 2.0 SP8");
var sp = get_kb_item("Host/EulerOS/sp");
if (isnull(sp) || sp !~ "^(8)$") audit(AUDIT_OS_NOT, "EulerOS 2.0 SP8");
if (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, "EulerOS 2.0 SP8", "EulerOS UVP " + uvp);
if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
var cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu);
if ("aarch64" >!< cpu) audit(AUDIT_ARCH_NOT, "aarch64", cpu);
var flag = 0;
var pkgs = [
"mariadb-10.3.9-2.h4.eulerosv2r8",
"mariadb-common-10.3.9-2.h4.eulerosv2r8",
"mariadb-devel-10.3.9-2.h4.eulerosv2r8"
];
foreach (var pkg in pkgs)
if (rpm_check(release:"EulerOS-2.0", sp:"8", reference:pkg)) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
var tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "mariadb");
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo