MySQL 8.0.13
Release notes :
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-13.html
CVEs fixed :
CVE-2018-3276 CVE-2018-3200 CVE-2018-3137 CVE-2018-3284 CVE-2018-3195 CVE-2018-3173 CVE-2018-3212 CVE-2018-3279 CVE-2018-3162 CVE-2018-3247 CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174 CVE-2018-3282 CVE-2018-3285 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3145 CVE-2018-3170 CVE-2018-3186 CVE-2018-3182 CVE-2018-3133 CVE-2018-3143 CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3286 CVE-2018-3185 CVE-2018-3280 CVE-2018-3203 CVE-2018-3155
Maintainer’s notes :
MySQL now builds MySQL Router (for innoDB cluster) as a part of the server. However since it can’t be used without MySQL Shell, whuch is not packed to Fedora, nor the Router is allowed to be built & packed.
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory FEDORA-2018-c82fc3e109.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(120783);
script_version("1.6");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/06");
script_cve_id("CVE-2018-3133", "CVE-2018-3137", "CVE-2018-3143", "CVE-2018-3144", "CVE-2018-3145", "CVE-2018-3155", "CVE-2018-3156", "CVE-2018-3161", "CVE-2018-3162", "CVE-2018-3170", "CVE-2018-3171", "CVE-2018-3173", "CVE-2018-3174", "CVE-2018-3182", "CVE-2018-3185", "CVE-2018-3186", "CVE-2018-3187", "CVE-2018-3195", "CVE-2018-3200", "CVE-2018-3203", "CVE-2018-3212", "CVE-2018-3247", "CVE-2018-3251", "CVE-2018-3276", "CVE-2018-3277", "CVE-2018-3278", "CVE-2018-3279", "CVE-2018-3280", "CVE-2018-3282", "CVE-2018-3283", "CVE-2018-3284", "CVE-2018-3285", "CVE-2018-3286");
script_xref(name:"FEDORA", value:"2018-c82fc3e109");
script_name(english:"Fedora 29 : community-mysql (2018-c82fc3e109)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"**MySQL 8.0.13**
Release notes :
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-13.html
CVEs fixed :
CVE-2018-3276 CVE-2018-3200 CVE-2018-3137 CVE-2018-3284 CVE-2018-3195
CVE-2018-3173 CVE-2018-3212 CVE-2018-3279 CVE-2018-3162 CVE-2018-3247
CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174 CVE-2018-3282
CVE-2018-3285 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3145
CVE-2018-3170 CVE-2018-3186 CVE-2018-3182 CVE-2018-3133 CVE-2018-3143
CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3286 CVE-2018-3185
CVE-2018-3280 CVE-2018-3203 CVE-2018-3155
Maintainer's notes :
MySQL now builds MySQL Router (for innoDB cluster) as a part of the
server. However since it can't be used without MySQL Shell, whuch is
not packed to Fedora, nor the Router is allowed to be built & packed.
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bodhi.fedoraproject.org/updates/FEDORA-2018-c82fc3e109"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected community-mysql package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-3247");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:community-mysql");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:29");
script_set_attribute(attribute:"vuln_publication_date", value:"2018/10/17");
script_set_attribute(attribute:"patch_publication_date", value:"2018/11/10");
script_set_attribute(attribute:"plugin_publication_date", value:"2019/01/03");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^29([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 29", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC29", reference:"community-mysql-8.0.13-1.fc29")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "community-mysql");
}
Vendor | Product | Version | CPE |
---|---|---|---|
fedoraproject | fedora | community-mysql | p-cpe:/a:fedoraproject:fedora:community-mysql |
fedoraproject | fedora | 29 | cpe:/o:fedoraproject:fedora:29 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3133
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3137
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3143
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3144
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3145
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3155
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3156
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3161
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3162
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3170
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3171
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3173
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3174
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3182
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3185
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3186
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3187
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3195
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3200
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3203
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3212
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3247
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3251
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3276
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3277
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3278
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3279
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3280
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3282
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3283
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3284
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3285
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3286
bodhi.fedoraproject.org/updates/FEDORA-2018-c82fc3e109