Lucene search

K
suseSuseSUSE-SU-2018:0697-1
HistoryMar 15, 2018 - 9:07 p.m.

Security update for mariadb (important)

2018-03-1521:07:15
lists.opensuse.org
74

0.001 Low

EPSS

Percentile

47.2%

This update for mariadb fixes the following issues:

MariaDB was updated to 10.0.34 (bsc#1078431)

The following security vulnerabilities are fixed:

  • CVE-2018-2562: Vulnerability in the MySQL Server subcomponent: Server :
    Partition. Easily exploitable vulnerability allowed low privileged
    attacker with network access via multiple protocols to compromise MySQL
    Server. Successful attacks of this vulnerability can result in
    unauthorized ability to cause a hang or frequently repeatable crash
    (complete DOS) of MySQL Server as well as unauthorized update, insert or
    delete access to some of MySQL Server accessible data.
  • CVE-2018-2622: Vulnerability in the MySQL Server subcomponent: Server:
    DDL. Easily exploitable vulnerability allowed low privileged attacker
    with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized
    ability to cause a hang or frequently repeatable crash (complete DOS) of
    MySQL Server.
  • CVE-2018-2640: Vulnerability in the MySQL Server subcomponent: Server:
    Optimizer. Successful attacks of this vulnerability can result in
    unauthorized ability to cause a hang or frequently repeatable crash
    (complete DOS) of MySQL Server.
  • CVE-2018-2665: Vulnerability in the MySQL Server subcomponent: Server:
    Optimizer. Easily exploitable vulnerability allowed low privileged
    attacker with network access via multiple protocols to compromise MySQL
    Server. Successful attacks of this vulnerability can result in
    unauthorized ability to cause a hang or frequently repeatable crash
    (complete DOS) of MySQL Server.
  • CVE-2018-2668: Vulnerability in the MySQL Server subcomponent: Server:
    Optimizer. Easily exploitable vulnerability allowed low privileged
    attacker with network access via multiple protocols to compromise MySQL
    Server. Successful attacks of this vulnerability can result in
    unauthorized ability to cause a hang or frequently repeatable crash
    (complete DOS) of MySQL Server.
  • CVE-2018-2612: Vulnerability in the MySQL Server subcomponent: InnoDB.
    Easily exploitable vulnerability allowed high privileged attacker with
    network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized
    creation, deletion or modification access to critical data or all MySQL
    Server accessible data and unauthorized ability to cause a hang or
    frequently repeatable crash (complete DOS) of MySQL Server.

The MariaDB external release notes and changelog for this release: