CVE-2019-3648

CVE-2019-3648 is a local privilege-escalation in McAfee Total Protection for Windows (client) affecting 16.0.R22 and earlier. The root cause is privilege-protected file placements that allow an administrator to execute arbitrary code. Impact is local code execution with elevated privileges if a a...

CVE-2019-3648 Implicit loading of DLLs

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...

Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by vulnerabilities in Oracle MySQL

Summary IBM Security Guardium Database Activity Monitor has addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2017-3651 DESCRIPTION: An unspecified vulnerability in Oracle MySQL related to the Server Client mysqldump component could allow an authenticated attacker to cause ...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : curl vulnerabilities (USN-3648-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3648-1 advisory. Dario Weisser discovered that curl incorrectly handled long FTP server command replies. If a user or automated system were tricke...

Ubuntu: Security Advisory (USN-3648-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: rh-mysql57-mysql security and bug fix update

An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Amazon Linux AMI : mysql56 (ALAS-2017-888)

Server: Charsets unspecified vulnerability CPU Jul 2017 : Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows...

Amazon Linux AMI : mysql55 (ALAS-2017-887)

Server: Charsets unspecified vulnerability CPU Jul 2017 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows hig...

Medium: mysql56

Issue Overview: Server: Charsets unspecified vulnerability CPU Jul 2017: Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit...

SUSE SLES11 Security Update : mysql (SUSE-SU-2017:2290-1)

This update for mysql fixes the following issues : - CVE-2017-3635: C API unspecified vulnerability bsc1049398 - CVE-2017-3636: Client programs unspecified vulnerability bsc1049399 - CVE-2017-3641: DML unspecified vulnerability bsc1049404 - CVE-2017-3648: Charsets unspecified vulnerability...

SUSE-SU-2017:2290-1 Security update for mysql

This update for mysql fixes the following issues: - CVE-2017-3635: C API unspecified vulnerability bsc1049398 - CVE-2017-3636: Client programs unspecified vulnerability bsc1049399 - CVE-2017-3641: DML unspecified vulnerability bsc1049404 - CVE-2017-3648: Charsets unspecified vulnerability...

Fedora Update for community-mysql FEDORA-2017-ee93493bea

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for community-mysql FEDORA-2017-7c039552fa

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : community-mysql (2017-7c039552fa)

Update to version 5.7.19 Replication tests in the testsuite enabled, they don't fail anymore Resolves: 1462688; /run 1406172; random failures of the testsuite 1417880, 1417883, 1417885, 1417887, 1417890, 1417891, 1417893, 1417894, 1417896; replication tests CVE fixes: 1472716 CVE-2017-3633,...

CVE-2017-3648

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...

CVE-2017-3648

CVE-2017-3648 affects the Oracle MySQL Server component (subcomponent: Charsets). MiracleLinux/Nessus entries show affected versions: 5.5.56 and earlier, 5.6.36 and earlier, and 5.7.18 and earlier. The vulnerability stems from the MySQL Server’s handling of chars/handshake, allowing a high-privil...

openSUSE Security Update : mysql-community-server (openSUSE-2017-866)

This update for mysql-community-server to version 5.6.37 fixes security issues and bugs. The following vulnerabilities were fixed : - CVE-2017-3633: Memcached unspecified vulnerability boo1049394 - CVE-2017-3634: DML unspecified vulnerability boo1049396 - CVE-2017-3635: C API unspecified...

[SECURITY] [DSA 3922-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3922-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3922-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3922-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 28, 2017 https://www.debian.org/security/faq -...

MySQL 5.5.x < 5.5.57 Multiple Vulnerabilities (July 2017 CPU)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.57. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Connector/C and C API components that allow an authenticated, remote attacker to cause a denial of service condition. CVE-2017-363...