Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

The version of MariaDB installed on the remote host is prior to 10.0.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-10-0-17-release-notes advisory.

  - Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote     authenticated users to affect availability via vectors related to InnoDB : DML. (CVE-2015-0433)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote     authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.
    (CVE-2015-0441)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote     attackers to affect availability via unknown vectors related to Server : Security : Privileges.
    (CVE-2015-2568)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote     authenticated users to affect availability via vectors related to DDL. (CVE-2015-2573)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MariaDB running of remote host is 5.5.0 prior to 5.5.42. It is, therefore, affected by multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201507-19 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send a specially crafted request, possibly       resulting in execution of arbitrary code with the privileges of the       application or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Updated mariadb packages that fix several security issues are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the '--ssl' option. A man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server. (CVE-2015-3152)

This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section.
(CVE-2015-0501, CVE-2015-2568, CVE-2015-0499, CVE-2015-2571, CVE-2015-0433, CVE-2015-0441, CVE-2015-0505, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-4737, CVE-2015-4752, CVE-2015-4757)

These updated packages upgrade MariaDB to version 5.5.44. Refer to the MariaDB Release Notes listed in the References section for a complete list of changes.

All MariaDB users should upgrade to these updated packages, which correct these issues. After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.

It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the '--ssl' option. A man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server. (CVE-2015-3152)

(CVE-2015-0501, CVE-2015-2568, CVE-2015-0499, CVE-2015-2571, CVE-2015-0433, CVE-2015-0441, CVE-2015-0505, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-4737, CVE-2015-4752, CVE-2015-4757)

After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1665 advisory.

    [1:5.5.44-1]
    - Rebase to 5.5.44       Resolves: #1247021

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes several vulnerabilities in the MySQL database server. (CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-4737, CVE-2015-4752, CVE-2015-4757)

After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1628 advisory.

    [5.5.45-1]
    - Rebase to 5.5.45       Includes fixes for: CVE-2014-6568 CVE-2015-0374       CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432       CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433       CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620       CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757       Resolves: #1247020

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages, listed in the References section. (CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-4737, CVE-2015-4752, CVE-2015-4757)

These updated packages upgrade MySQL to version 5.5.45. Refer to the MySQL Release Notes listed in the References section for a complete list of changes.

All MySQL users should upgrade to these updated packages, which correct these issues. After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1628 advisory.

  - mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015) (CVE-2014-6568)

  - mysql: unspecified vulnerability related to Server:Security:Privileges:Foreign Key (CPU Jan 2015)     (CVE-2015-0374)

  - mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015) (CVE-2015-0381,     CVE-2015-0382)

  - mysql: unspecified vulnerability related to Server:DDL (CPU Jan 2015) (CVE-2015-0391)

  - mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015) (CVE-2015-0411)

  - mysql: unspecified vulnerability related to Server:InnoDB:DDL:Foreign Key (CPU Jan 2015) (CVE-2015-0432)

  - mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015) (CVE-2015-0433)

  - mysql: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015) (CVE-2015-0441)

  - mysql: unspecified vulnerability related to Server:Federated (CPU April 2015) (CVE-2015-0499)

  - mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015) (CVE-2015-0501)

  - mysql: unspecified vulnerability related to Server:DDL (CPU April 2015) (CVE-2015-0505, CVE-2015-2573)

  - mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015) (CVE-2015-2568)

  - mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015) (CVE-2015-2571)

  - mysql: unspecified vulnerability related to Server:GIS (CPU July 2015) (CVE-2015-2582)

  - mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015) (CVE-2015-2620)

  - mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015) (CVE-2015-2643,     CVE-2015-4757)

  - mysql: unspecified vulnerability related to Server:DML (CPU July 2015) (CVE-2015-2648)

  - mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015) (CVE-2015-4737)

  - mysql: unspecified vulnerability related to Server:I_S (CPU July 2015) (CVE-2015-4752)

  - mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) (CVE-2015-4816)

  - mysql: unspecified vulnerability related to Client programs (CPU October 2015) (CVE-2015-4819)

  - mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015) (CVE-2015-4864)

  - mysql: unspecified vulnerability related to Server:DML (CPU October 2015) (CVE-2015-4879)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes the following security issues :

  - Logjam attack: mysql uses 512 bit dh groups in SSL     [bnc#934789]

  - CVE-2015-3152: mysql --ssl does not enforce SSL     [bnc#924663]

  - CVE-2014-8964: heap buffer overflow [bnc#906574]

  - CVE-2015-2325: heap buffer overflow in compile_branch()     [bnc#924960]

  - CVE-2015-2326: heap buffer overflow in pcre_compile2()     [bnc#924961]

  - CVE-2015-0501: unspecified vulnerability related to     Server:Compiling (CPU April 2015)

  - CVE-2015-2571: unspecified vulnerability related to     Server:Optimizer (CPU April 2015)

  - CVE-2015-0505: unspecified vulnerability related to     Server:DDL (CPU April 2015)

  - CVE-2015-0499: unspecified vulnerability related to     Server:Federated (CPU April 2015)

  - CVE-2015-2568: unspecified vulnerability related to     Server:Security:Privileges (CPU April 2015)

  - CVE-2015-2573: unspecified vulnerability related to     Server:DDL (CPU April 2015)

  - CVE-2015-0433: unspecified vulnerability related to     Server:InnoDB:DML (CPU April 2015)

  - CVE-2015-0441: unspecified vulnerability related to     Server:Security:Encryption (CPU April 2015)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several issues have been discovered in the MariaDB database server.
The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.20. Please see the MariaDB 10.0 Release Notes for further details :

  -     https://mariadb.com/kb/en/mariadb/mariadb-10017-release-     notes/
  -     https://mariadb.com/kb/en/mariadb/mariadb-10018-release-     notes/

  -     https://mariadb.com/kb/en/mariadb/mariadb-10019-release-     notes/

  -     https://mariadb.com/kb/en/mariadb/mariadb-10020-release-     notes/

MariaDB was updated to its current minor version, fixing bugs and security issues.

These updates include a fix for Logjam (CVE-2015-4000), making MariaDB work with client software that no longer allows short DH groups over SSL, as e.g. our current openssl packages.

On openSUSE 13.1, MariaDB was updated to 5.5.44.

On openSUSE 13.2, MariaDB was updated from 10.0.13 to 10.0.20.

Please read the release notes of MariaDB https://mariadb.com/kb/en/mariadb/mariadb-10020-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10019-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10018-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10017-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10016-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10015-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10014-release-notes/ for more information.

MySQL was updated to version 5.5.43 to fix several security and non security issues :

CVEs fixed: CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204, CVE-2015-0205, CVE-2015-0206, CVE-2015-0405, CVE-2015-0423, CVE-2015-0433, CVE-2015-0438, CVE-2015-0439, CVE-2015-0441, CVE-2015-0498, CVE-2015-0499, CVE-2015-0500, CVE-2015-0501, CVE-2015-0503, CVE-2015-0505, CVE-2015-0506, CVE-2015-0507, CVE-2015-0508, CVE-2015-0511, CVE-2015-2566, CVE-2015-2567, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2576.

Fix integer overflow in regcomp (Henry Spencer's regex library) for excessively long pattern strings. (bnc#922043, CVE-2015-2305)

For a comprehensive list of changes, refer to <a href='http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-43.html' >http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-43.html</a>.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New mysql packages are available for Slackware 14.0 to fix security issues.

New mariadb packages are available for Slackware 14.1 and -current to fix security issues.

The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.42 or 5.6.x prior to 5.6.23. It is, therefore, affected by errors in the following components :

  - Server : DDL (CVE-2015-2573)

  - Server : InnoDB : DML (CVE-2015-0433)

  - Server : Security : Encryption (CVE-2015-0441)

  - Server : Security : Privileges (CVE-2015-2568)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2575-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to     fix these issues. MySQL has been updated to 5.5.43.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-42.html     http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-43.html     http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.43. Please see the MySQL 5.5 Release Notes and Oracle's Critical Patch Update advisory for further details :

  -     https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5
    -42.html
  -     https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5
    -43.html

  -     http://www.oracle.com/technetwork/topics/security/cpuapr     2015-2365600.html

The version of MySQL running on the remote host is version 5.5.x prior to 5.5.42 or version 5.6.x prior to 5.6.23. It is, therefore, potentially affected by multiple denial of service vulnerabilities :

  - A NULL pointer dereference flaw exists when the SSLv3     option isn't enabled and an SSLv3 ClientHello is     received. This allows a remote attacker, using an     unexpected handshake, to crash the daemon, resulting in     a denial of service. (CVE-2014-3569)

  - Additionally, there are unspecified flaws in the     following MySQL subcomponents that allow a denial of     service by an authenticated, remote attacker :

    - XA (CVE-2015-0405)
    - Optimizer (CVE-2015-0423)
    - InnoDB : DML (CVE-2015-0433)
    - Partition (CVE-2015-0438)
    - InnoDB (CVE-2015-0439)
    - Security : Encryption (CVE-2015-0441)
    - DML (CVE-2015-2566)
    - Security : Privileges (CVE-2015-2568)
    - DDL (CVE-2015-2573)

ID	Name	Product	Family	Severity
167896	MariaDB 10.0.0 < 10.0.17 Multiple Vulnerabilities	Nessus	Databases	critical
121190	MariaDB 5.5.0 < 5.5.42 Multiple Vulnerabilities	Nessus	Databases	high
86088	GLSA-201507-19 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
85635	CentOS 7 : mariadb (CESA-2015:1665) (BACKRONYM)	Nessus	CentOS Local Security Checks	medium
85622	Scientific Linux Security Update : mariadb on SL7.x x86_64 (20150824) (BACKRONYM)	Nessus	Scientific Linux Local Security Checks	medium
85616	RHEL 7 : mariadb (RHSA-2015:1665) (BACKRONYM)	Nessus	Red Hat Local Security Checks	medium
85612	Oracle Linux 7 : mariadb (ELSA-2015-1665)	Nessus	Oracle Linux Local Security Checks	medium
85499	Scientific Linux Security Update : mysql55-mysql on SL5.x i386/x86_64 (20150817)	Nessus	Scientific Linux Local Security Checks	high
85488	Oracle Linux 5 : mysql55-mysql (ELSA-2015-1628)	Nessus	Oracle Linux Local Security Checks	medium
85460	CentOS 5 : mysql55-mysql (CESA-2015:1628)	Nessus	CentOS Local Security Checks	high
85443	RHEL 5 : mysql55-mysql (RHSA-2015:1628)	Nessus	Red Hat Local Security Checks	medium
84913	SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2015:1273-1) (BACKRONYM)	Nessus	SuSE Local Security Checks	high
84839	Debian DSA-3311-1 : mariadb-10.0 - security update (BACKRONYM)	Nessus	Debian Local Security Checks	medium
84658	openSUSE Security Update : MariaDB (openSUSE-2015-479) (BACKRONYM) (Logjam)	Nessus	SuSE Local Security Checks	high
83860	SUSE SLED11 / SLES11 Security Update : MySQL (SUSE-SU-2015:0946-1) (FREAK)	Nessus	SuSE Local Security Checks	medium
83372	Slackware 14.0 : mysql (SSA:2015-132-02)	Nessus	Slackware Local Security Checks	medium
83371	Slackware 14.1 / current : mariadb (SSA:2015-132-01)	Nessus	Slackware Local Security Checks	medium
8760	Oracle MySQL 5.5.x < 5.5.42 / 5.6.x < 5.6.23 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
82993	Ubuntu 14.04 LTS : MySQL vulnerabilities (USN-2575-1)	Nessus	Ubuntu Local Security Checks	critical
82865	Debian DSA-3229-1 : mysql-5.5 - security update	Nessus	Debian Local Security Checks	medium
82799	MySQL 5.5.x < 5.5.42 / 5.6.x < 5.6.23 Multiple DoS Vulnerabilities (April 2015 CPU)	Nessus	Databases	medium

Detections

Analytics

CVE-2015-2573

high

Tenable Plugins

critical

high

medium

medium

medium

medium

medium

high

medium

high

medium

high

medium

high

medium

medium

medium

medium

critical

medium

medium