The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2189-1 advisory.
MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used. (CVE-2021-46669)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2022-21427)
MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements. (CVE-2022-27376)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements. (CVE-2022-27377)
An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. (CVE-2022-27378)
An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
(CVE-2022-27379)
An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. (CVE-2022-27380)
An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. (CVE-2022-27381)
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order. (CVE-2022-27382)
MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements. (CVE-2022-27383)
An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
(CVE-2022-27384)
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. (CVE-2022-27386)
MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements. (CVE-2022-27387)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc. (CVE-2022-27444)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc. (CVE-2022-27445)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h. (CVE-2022-27446)
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. (CVE-2022-27447)
There is an Assertion failure in MariaDB Server v10.9 and below via ‘node->pcur->rel_pos == BTR_PCUR_ON’ at /row/row0mysql.cc. (CVE-2022-27448)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148. (CVE-2022-27449)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc. (CVE-2022-27451)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc. (CVE-2022-27452)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c. (CVE-2022-27455)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc. (CVE-2022-27456)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c. (CVE-2022-27457)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h. (CVE-2022-27458)
Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.
##
# (C) Tenable, Inc.
#
# The package checks in this plugin were extracted from
# SUSE update advisory SUSE-SU-2022:2189-1. The text itself
# is copyright (C) SUSE.
##
include('compat.inc');
if (description)
{
script_id(162556);
script_version("1.5");
script_set_attribute(attribute:"plugin_modification_date", value:"2023/07/13");
script_cve_id(
"CVE-2021-46669",
"CVE-2022-21427",
"CVE-2022-27376",
"CVE-2022-27377",
"CVE-2022-27378",
"CVE-2022-27379",
"CVE-2022-27380",
"CVE-2022-27381",
"CVE-2022-27382",
"CVE-2022-27383",
"CVE-2022-27384",
"CVE-2022-27386",
"CVE-2022-27387",
"CVE-2022-27444",
"CVE-2022-27445",
"CVE-2022-27446",
"CVE-2022-27447",
"CVE-2022-27448",
"CVE-2022-27449",
"CVE-2022-27451",
"CVE-2022-27452",
"CVE-2022-27455",
"CVE-2022-27456",
"CVE-2022-27457",
"CVE-2022-27458"
);
script_xref(name:"SuSE", value:"SUSE-SU-2022:2189-1");
script_name(english:"SUSE SLES15 Security Update : mariadb (SUSE-SU-2022:2189-1)");
script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
script_set_attribute(attribute:"description", value:
"The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as
referenced in the SUSE-SU-2022:2189-1 advisory.
- MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT
data type is used. (CVE-2021-46669)
- Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions
that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high
privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful
attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MySQL Server. (CVE-2022-21427)
- MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component
Item_args::walk_arg, which is exploited via specially crafted SQL statements. (CVE-2022-27376)
- MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component
Item_func_in::cleanup(), which is exploited via specially crafted SQL statements. (CVE-2022-27377)
- An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to
allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. (CVE-2022-27378)
- An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was
discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
(CVE-2022-27379)
- An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to
allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. (CVE-2022-27380)
- An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow
attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. (CVE-2022-27381)
- MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component
Item_field::used_tables/update_depend_map_for_order. (CVE-2022-27382)
- MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component
my_strcasecmp_8bit, which is exploited via specially crafted SQL statements. (CVE-2022-27383)
- An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was
discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
(CVE-2022-27384)
- MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component
sql/sql_class.cc. (CVE-2022-27386)
- MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component
decimal_bin_size, which is exploited via specially crafted SQL statements. (CVE-2022-27387)
- MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component
sql/item_subselect.cc. (CVE-2022-27444)
- MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component
sql/sql_window.cc. (CVE-2022-27445)
- MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component
sql/item_cmpfunc.h. (CVE-2022-27446)
- MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component
Binary_string::free_buffer() at /sql/sql_string.h. (CVE-2022-27447)
- There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON'
at /row/row0mysql.cc. (CVE-2022-27448)
- MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component
sql/item_func.cc:148. (CVE-2022-27449)
- MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component
sql/field_conv.cc. (CVE-2022-27451)
- MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component
sql/item_cmpfunc.cc. (CVE-2022-27452)
- MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component
my_wildcmp_8bit_impl at /strings/ctype-simple.c. (CVE-2022-27455)
- MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec
at /sql/sql_type.cc. (CVE-2022-27456)
- MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component
my_mb_wc_latin1 at /strings/ctype-latin1.c. (CVE-2022-27457)
- MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component
Binary_string::free_buffer() at /sql/sql_string.h. (CVE-2022-27458)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198603");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198604");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198605");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198606");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198607");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198609");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198610");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198611");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198612");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198613");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198628");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198629");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198630");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198631");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198632");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198633");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198634");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198635");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198636");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198637");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198638");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198639");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1198640");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1199928");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2021-46669");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-21427");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27376");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27377");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27378");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27379");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27380");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27381");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27382");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27383");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27384");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27386");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27387");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27444");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27445");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27446");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27447");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27448");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27449");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27451");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27452");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27455");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27456");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27457");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2022-27458");
# https://lists.suse.com/pipermail/sle-security-updates/2022-June/011363.html
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a54a32a0");
script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-27458");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2022/02/01");
script_set_attribute(attribute:"patch_publication_date", value:"2022/06/27");
script_set_attribute(attribute:"plugin_publication_date", value:"2022/06/28");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libmariadbd-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libmariadbd19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mariadb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mariadb-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mariadb-errormessages");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mariadb-tools");
script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"SuSE Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
exit(0);
}
include('rpm.inc');
if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item("Host/SuSE/release");
if (isnull(os_release) || os_release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
var os_ver = pregmatch(pattern: "^(SLE(S|D)(?:_SAP)?\d+)", string:os_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'SUSE');
os_ver = os_ver[1];
if (! preg(pattern:"^(SLES15|SLES_SAP15)$", string:os_ver)) audit(AUDIT_OS_NOT, 'SUSE SLES15 / SLES_SAP15', 'SUSE (' + os_ver + ')');
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'SUSE (' + os_ver + ')', cpu);
var service_pack = get_kb_item("Host/SuSE/patchlevel");
if (isnull(service_pack)) service_pack = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(2)$", string:service_pack))) audit(AUDIT_OS_NOT, "SLES15 SP2", os_ver + " SP" + service_pack);
if (os_ver == "SLES_SAP15" && (! preg(pattern:"^(2)$", string:service_pack))) audit(AUDIT_OS_NOT, "SLES_SAP15 SP2", os_ver + " SP" + service_pack);
var pkgs = [
{'reference':'libmariadbd-devel-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
{'reference':'libmariadbd19-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
{'reference':'mariadb-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
{'reference':'mariadb-client-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
{'reference':'mariadb-errormessages-10.4.25-150200.3.28.1', 'sp':'2', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
{'reference':'mariadb-tools-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
{'reference':'libmariadbd-devel-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2']},
{'reference':'libmariadbd-devel-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2', 'sles-release-15.2']},
{'reference':'libmariadbd19-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2']},
{'reference':'libmariadbd19-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2', 'sles-release-15.2']},
{'reference':'mariadb-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2']},
{'reference':'mariadb-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2', 'sles-release-15.2']},
{'reference':'mariadb-client-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2']},
{'reference':'mariadb-client-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2', 'sles-release-15.2']},
{'reference':'mariadb-errormessages-10.4.25-150200.3.28.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2', 'sles-release-15.2']},
{'reference':'mariadb-tools-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2']},
{'reference':'mariadb-tools-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-2', 'sles-release-15.2']},
{'reference':'libmariadbd-devel-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'libmariadbd-devel-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'libmariadbd19-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'libmariadbd19-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'mariadb-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'mariadb-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'mariadb-client-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'mariadb-client-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'mariadb-errormessages-10.4.25-150200.3.28.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2', 'sles-ltss-release-15.2']},
{'reference':'mariadb-tools-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'mariadb-tools-10.4.25-150200.3.28.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
{'reference':'libmariadbd-devel-10.4.25-150200.3.28.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
{'reference':'libmariadbd19-10.4.25-150200.3.28.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
{'reference':'mariadb-10.4.25-150200.3.28.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
{'reference':'mariadb-client-10.4.25-150200.3.28.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
{'reference':'mariadb-tools-10.4.25-150200.3.28.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']}
];
var ltss_caveat_required = FALSE;
var flag = 0;
foreach var package_array ( pkgs ) {
var reference = NULL;
var _release = NULL;
var sp = NULL;
var _cpu = NULL;
var exists_check = NULL;
var rpm_spec_vers_cmp = NULL;
if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
if (!empty_or_null(package_array['release'])) _release = package_array['release'];
if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
if (reference && _release) {
if (exists_check) {
var check_flag = 0;
foreach var check (exists_check) {
if (!rpm_exists(release:_release, rpm:check)) continue;
if ('ltss' >< tolower(check)) ltss_caveat_required = TRUE;
check_flag++;
}
if (!check_flag) continue;
}
if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, rpm_spec_vers_cmp:rpm_spec_vers_cmp)) flag++;
}
}
if (flag)
{
var ltss_plugin_caveat = NULL;
if(ltss_caveat_required) ltss_plugin_caveat = '\n' +
'NOTE: This vulnerability check contains fixes that apply to\n' +
'packages only available in SUSE Enterprise Linux Server LTSS\n' +
'repositories. Access to these package security updates require\n' +
'a paid SUSE LTSS subscription.\n';
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get() + ltss_plugin_caveat
);
exit(0);
}
else
{
var tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'libmariadbd-devel / libmariadbd19 / mariadb / mariadb-client / etc');
}
Vendor | Product | Version | CPE |
---|---|---|---|
novell | suse_linux | libmariadbd-devel | p-cpe:/a:novell:suse_linux:libmariadbd-devel |
novell | suse_linux | libmariadbd19 | p-cpe:/a:novell:suse_linux:libmariadbd19 |
novell | suse_linux | mariadb | p-cpe:/a:novell:suse_linux:mariadb |
novell | suse_linux | mariadb-client | p-cpe:/a:novell:suse_linux:mariadb-client |
novell | suse_linux | mariadb-errormessages | p-cpe:/a:novell:suse_linux:mariadb-errormessages |
novell | suse_linux | mariadb-tools | p-cpe:/a:novell:suse_linux:mariadb-tools |
novell | suse_linux | 15 | cpe:/o:novell:suse_linux:15 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46669
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21427
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27376
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27377
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27378
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27379
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27380
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27381
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27382
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27383
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27384
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27386
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27387
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27444
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27445
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27446
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27447
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27448
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27449
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27451
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27452
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27455
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27456
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27457
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27458
www.nessus.org/u?a54a32a0
bugzilla.suse.com/1198603
bugzilla.suse.com/1198604
bugzilla.suse.com/1198605
bugzilla.suse.com/1198606
bugzilla.suse.com/1198607
bugzilla.suse.com/1198609
bugzilla.suse.com/1198610
bugzilla.suse.com/1198611
bugzilla.suse.com/1198612
bugzilla.suse.com/1198613
bugzilla.suse.com/1198628
bugzilla.suse.com/1198629
bugzilla.suse.com/1198630
bugzilla.suse.com/1198631
bugzilla.suse.com/1198632
bugzilla.suse.com/1198633
bugzilla.suse.com/1198634
bugzilla.suse.com/1198635
bugzilla.suse.com/1198636
bugzilla.suse.com/1198637
bugzilla.suse.com/1198638
bugzilla.suse.com/1198639
bugzilla.suse.com/1198640
bugzilla.suse.com/1199928
www.suse.com/security/cve/CVE-2021-46669
www.suse.com/security/cve/CVE-2022-21427
www.suse.com/security/cve/CVE-2022-27376
www.suse.com/security/cve/CVE-2022-27377
www.suse.com/security/cve/CVE-2022-27378
www.suse.com/security/cve/CVE-2022-27379
www.suse.com/security/cve/CVE-2022-27380
www.suse.com/security/cve/CVE-2022-27381
www.suse.com/security/cve/CVE-2022-27382
www.suse.com/security/cve/CVE-2022-27383
www.suse.com/security/cve/CVE-2022-27384
www.suse.com/security/cve/CVE-2022-27386
www.suse.com/security/cve/CVE-2022-27387
www.suse.com/security/cve/CVE-2022-27444
www.suse.com/security/cve/CVE-2022-27445
www.suse.com/security/cve/CVE-2022-27446
www.suse.com/security/cve/CVE-2022-27447
www.suse.com/security/cve/CVE-2022-27448
www.suse.com/security/cve/CVE-2022-27449
www.suse.com/security/cve/CVE-2022-27451
www.suse.com/security/cve/CVE-2022-27452
www.suse.com/security/cve/CVE-2022-27455
www.suse.com/security/cve/CVE-2022-27456
www.suse.com/security/cve/CVE-2022-27457
www.suse.com/security/cve/CVE-2022-27458