289 matches found
Important: Red Hat Security Advisory: rh-mysql56-mysql security and bug fix update
An update for rh-mysql56-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
EulerOS 2.0 SP2 : mariadb (EulerOS-SA-2017-1170)
According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A databas...
EulerOS 2.0 SP1 : mariadb (EulerOS-SA-2017-1169)
According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A databas...
Scientific Linux Security Update : mariadb on SL7.x x86_64 (20170801)
The following packages have been upgraded to a later upstream version: mariadb 5.5.56. Security Fixes : - It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or...
Oracle Linux 7 : mariadb (ELSA-2017-2192)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2192 advisory. - Rebase to 5.5.56 That release also fixes the following security issues: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238 CVE-2017-3243...
Moderate: Red Hat Security Advisory: mariadb security and bug fix update
An update for mariadb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2016-3600
CVE-2016-3600 entry is rejected/not used; it does not represent an active vulnerability.
openSUSE Security Update : mysql-community-server (openSUSE-2017-555) (Riddle)
This update for mysql-community-server to version 5.6.36 fixes the following issues : These security issues were fixed : - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...
openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2017:1209-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2016-5483
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2016-5483
CVE-2016-5483 concerns MySQL 5.5 (mysql/mysqldump) where newline characters in database/table names were not handled safely. A privileged user could cause a restoration of a mysqldump backup to execute arbitrary shell or SQL commands. Remediation: upgrade to upstream MySQL 5.5.55 (as in Debian DS...
CVE-2016-5483
Disclaimer: This data contains information about vulnerable...
[SECURITY] [DSA 3834-1] mysql-5.5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3834-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2017 https://www.debian.org/security/faq -...
CVE-2017-3600
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client mysqldump. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...
CVE-2017-3600
CVE-2017-3600 applies to the Oracle MySQL Server component, specifically the Server mysqldump client. The issue is described as allowing a high-privileged attacker with network access to take over the MySQL server, with CVSS base score 6.6 (3.0) / 6.6 (3.1) depending on vector, and is equivalent ...
UBUNTU-CVE-2017-3600
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client mysqldump. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...
MySQL 5.6.x < 5.6.36 Multiple Vulnerabilities (April 2017 CPU) (July 2017 CPU) (Riddle)
The version of MySQL running on the remote host is 5.6.x prior to 5.6.36. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...
Debian: Security Advisory (DSA-3600-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...