MariaDB 10.1.0 < 10.1.31 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.31. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.31 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.3...

MariaDB 10.2.0 < 10.2.19 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.19. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.19 advisory. - The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2019:0119-1)

This update for mariadb to version 10.2.19 fixes the following issues: bsc1116686 Security issues fixed : CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-317...

SUSE-SU-2019:0119-1 Security update for mariadb

This update for mariadb to version 10.2.19 fixes the following issues: bsc1116686 Security issues fixed: - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162,...

MariaDB: CRLF injection on https://buildbot.mariadb.org

A CRLF new line injection vulnerability has been discovered in the Buildbot.net software and reported to us. We have forwarded this to the Buildbot developers which coordinated a fix release and public disclosure. This vulnerability has been assigned CVE-2019-7313. More details in the advisory te...

MariaDB 5.5.0 < 5.5.42 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.42. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.42 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to...

MariaDB 10.0.0 < 10.0.37 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.37. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.37 advisory. - The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors...

Privilege Escalation

mysql is vulnerable to privilege escalation attacks. The vulnerability exists as a race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before...

Denial Of Service (DoS)

mariadb55-mariadb is vulnerable to denial of service DoS attacks. The vulnerability exists through an unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server:...

Arbitrary Code Execution

mariadb-galera is vulnerable to arbitrary code execution attacks. The vulnerability exists as Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before...

Privilege Escalation

mariadb is vulnerable to arbitrary code execution. An unspecified vulnerability allows an unauthenticated attacker with logon to the infrastructure where MySQL Server executes, to compromise MySQL Server...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An unspecified vulnerability allows remote authenticated attackers to deny access to the server via vectors related to Server : Partition...

Information Disclosure

mysql55-myql is vulnerable to information disclosure attacks. The vulnerability exists as Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on wheth...

MariaDB: CRLF injection at https://mariadb.org/.

A CRLF injection vulnerability was discovered on our website that could lead to attacks such as client side cookie injection. This has been resolved by adjusting the offending rewrite rule in our web server configuration...

EulerOS Virtualization 2.5.1 : mariadb (EulerOS-SA-2019-1001)

According to the version of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Partition. Supported versions that are affected...

Fedora 28 : mariadb-connector-c (2018-a55f292297)

MariaDB C / C++ connector Release notes : https://mariadb.com/kb/en/library/mariadb-connector-c-307-release-note s/ Maintainer notes : Marking as a security update, beacuse of fixed resource leaks. Moving libmariadb pkgconfig file to this package from mariadb-devel. Test with MariaDB-3:10.2.19-2...

Fedora 28 : 3:mariadb (2018-2513b888a4)

MariaDB 10.2.15 Release notes : https://mariadb.com/kb/en/library/mariadb-10215-release-notes/ CVEs fixed : CVE-2018-2755 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2787 CVE-2018-2813 CVE-2018-2817 CVE-2018-2819 CVE-2018-2786 CVE-2018-2759...

Fedora 28 : 3:mariadb (2018-83bbd0c22f)

MariaDB 10.2.13 Release notes : https://mariadb.com/kb/en/library/mariadb-10213-release-notes/ CVEs fixed : CVE-2018-2562 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668 Bugs fixed : POSTIN scriplets fix for: https://bodhi.fedoraproject.org/updates/FEDORA-2018-4a4dc47afe Not...

Fedora 28 : 3:mariadb (2018-77e610115a)

MariaDB 10.2.17 Release notes : https://mariadb.com/kb/en/library/mariadb-10217-release-notes/ CVEs fixed : CVE-2018-3060 CVE-2018-3064 CVE-2018-3063 CVE-2018-3058 CVE-2018-3066 CVE-2018-3081 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 29 : 3:mariadb (2018-242f6c1a41)

MariaDB 10.3.11 Release notes : https://mariadb.com/kb/en/mariadb-10311-release-notes/ CVEs fixed : CVE-2018-3282 CVE-2016-9843 CVE-2018-3174 CVE-2018-3143 CVE-2018-3156 CVE-2018-3251 CVE-2018-3185 CVE-2018-3277 CVE-2018-3162 CVE-2018-3173 CVE-2018-3200 CVE-2018-3284 Note that Tenable Network...