Design/Logic Flaw

The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...

CVE-2016-6653

The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...

CVE-2016-6653

Summary of CVE-2016-6653 (MariaDB audit_plugin in CF cf-mysql-release 27/28) The MariaDB audit_plugin integrated into PCF cf-mysql-release versions 27 and 28 can emit audit logs to syslog. A bug causes those logs to include sensitive information, potentially exposing application data and cleartex...

Fedora 23 : 1:mariadb (2016-58f90ae3cc)

Update to 10.0.27, which also includes a security fix for CVE-2016-6662. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

openSUSE: Security Advisory for mariadb (openSUSE-SU-2016:2448-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3684-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : mariadb (openSUSE-2016-1154)

This update for mariadb to 10.0.27 fixes the following issues : Security issue fixed : - CVE-2016-6662: A malicious user with SQL and filesystem access could create a my.cnf in the datadir and, under certain circumstances, execute arbitrary code as mysql or even root user. bsc998309 - release not...

Debian Security Advisory DSA 3684-1 (libdbd-mysql-perl - security update)

Paul Rohar discovered that libdbd-mysql-perl, the Perl DBI database driver for MySQL and MariaDB, constructed an error message in a fixed-length buffer, leading to a crash FORTIFYSOURCE failure and, potentially, to denial of service. OpenVAS Vulnerability Test $Id: deb3684.nasl 6608 2017-07-07...

Security update for mariadb (important)

This update for mariadb to 10.0.27 fixes the following issues: Security issue fixed: CVE-2016-6662: A malicious user with SQL and filesystem access could create a my.cnf in the datadir and, under certain circumstances, execute arbitrary code as mysql or even root user. bsc998309 release notes:...

MariaDB 10.0.0 < 10.0.21 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.21. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.21 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via...

MariaDB 5.5.0 < 5.5.45 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.45. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.45 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect...

Debian DSA-3684-1 : libdbd-mysql-perl - security update

Pali Rohar discovered that libdbd-mysql-perl, the Perl DBI database driver for MySQL and MariaDB, constructed an error message in a fixed-length buffer, leading to a crash FORTIFYSOURCE failure and, potentially, to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] Fedora 23 Update: mariadb-10.0.27-1.fc23

MariaDB is a community developed branch of MySQL. MariaDB is a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client...

[SECURITY] [DSA 3684-1] libdbd-mysql-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3684-1 [email protected] https://www.debian.org/security/ Florian Weimer October 03, 2016 https://www.debian.org/security/faq -...

MariaDB 10.1.0 < 10.1.12 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.12 advisory. - Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before...

MariaDB 10.0.0 < 10.0.24 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.24. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.24 advisory. - Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before...

MariaDB 10.1.x < 10.1.7 Multiple Vulnerabilities

The version of MariaDB running on the remote host is 10.1.x prior to 10.1.7. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the baselistiterator::nextfast function within file sql/sqlparse.cc when handling multi-table updates. An...

CVE-2016-6653 MySQL Audit logs sent to Syslog | Cloud Foundry

CVE-2016-6653 MySQL Audit logs sent to Syslog High Vendor Cloud Foundry Foundation Versions Affected Cloud Foundry MySQL Release versions 271 and 282 Description MariaDB’s auditplugin, incorporated in cf-mysql-release starting with cf-mysql-release v27, allows the Operator to enable audit trails,...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2016:2395-1)

This update for mariadb to 1.0.0.27 fixes the following issues: Security issue fixed : - CVE-2016-6662: A malicious user with SQL and filesystem access could create a my.cnf in the datadir and , under certain circumstances, execute arbitrary code as mysql or even root user. bsc998309 - release...

CVE-2016-6662 - Multiple MySQL Vulnerabilities | Cloud Foundry

CVE-2016-6662 – Multiple MySQL Vulnerabilities Medium Vendor Cloud Foundry Foundation, MariaDB Versions Affected MariaDB versions prior to 10.1.17 cf-mysql versions prior to v29 Description The Cloud Foundry MySQL team recently completed an upgrade of MariaDB to 10.1.17, which includes a large...