Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016) (CVE-2016-3471)

  - mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016) (CVE-2016-3477)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote     authenticated users to affect availability via vectors related to Server : DDL. (CVE-2015-4815)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)     (CVE-2016-6662)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote     authenticated users to affect availability via unknown vectors related to Server : Partition, a different     vulnerability than CVE-2015-4802. (CVE-2015-4792)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote     authenticated users to affect availability via vectors related to Server : DDL. (CVE-2015-4815)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1132 advisory.

  - pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)     (CVE-2015-3210, CVE-2015-8384)

  - pcre: stack overflow caused by mishandled group empty match (8.38/11) (CVE-2015-3217)

  - mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) (CVE-2015-4792,     CVE-2015-4802)

  - mysql: unspecified vulnerability related to Server:DDL (CPU October 2015) (CVE-2015-4815)

  - mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) (CVE-2015-4816,     CVE-2015-4861, CVE-2015-4895)

  - mysql: unspecified vulnerability related to Client programs (CPU October 2015) (CVE-2015-4819)

  - mysql: unspecified vulnerability related to Server:Types (CPU October 2015) (CVE-2015-4826)

  - mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015) (CVE-2015-4830)

  - mysql: unspecified vulnerability related to Server:SP (CPU October 2015) (CVE-2015-4836)

  - mysql: unspecified vulnerability related to Server:DML (CPU October 2015) (CVE-2015-4858, CVE-2015-4879,     CVE-2015-4913)

  - mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) (CVE-2015-4870)

  - pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis     (8.38/18) (CVE-2015-5073, CVE-2015-8388)

  - pcre: Buffer overflow caused by duplicate named references (8.38/36) (CVE-2015-8381, CVE-2015-8395)

  - pcre: Buffer overflow caused by repeated conditional group (8.38/3) (CVE-2015-8383)

  - pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)     (CVE-2015-8385)

  - pcre: Buffer overflow caused by lookbehind assertion (8.38/6) (CVE-2015-8386)

  - pcre: inefficient posix character class syntax check (8.38/16) (CVE-2015-8391)

  - pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27) (CVE-2015-8392)

  - mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016) (CVE-2016-0505)

  - mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016) (CVE-2016-0546)

  - mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) (CVE-2016-0596,     CVE-2016-0598)

  - mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016) (CVE-2016-0597,     CVE-2016-0616)

  - mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016) (CVE-2016-0600,     CVE-2016-0610)

  - mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016)     (CVE-2016-0606)

  - mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016) (CVE-2016-0608)

  - mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016)     (CVE-2016-0609)

  - mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016) (CVE-2016-0640,     CVE-2016-0643, CVE-2016-0646)

  - mysql: unspecified vulnerability in subcomponent: Server: MyISAM (CPU April 2016) (CVE-2016-0641)

  - mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016) (CVE-2016-0642)

  - mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016) (CVE-2016-0644)

  - mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016) (CVE-2016-0647)

  - mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016) (CVE-2016-0648,     CVE-2016-0649)

  - mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU April 2016) (CVE-2016-0650)

  - mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016) (CVE-2016-0651)

  - mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016) (CVE-2016-0655,     CVE-2016-0668)

  - mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU April 2016)     (CVE-2016-0666)

  - pcre: heap buffer overflow in handling of duplicate named groups (8.39/14) (CVE-2016-1283)

  - mysql: ssl-validate-cert incorrect hostname check (CVE-2016-2047)

  - pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12) (CVE-2016-3191)

  - mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)     (CVE-2016-3452)

  - mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016) (CVE-2016-3459)

  - mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016) (CVE-2016-3471)

  - mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016) (CVE-2016-5444)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.50 and is affected by multiple issues :

 - Multiple unspecified overflow conditions exist that are triggered as user-supplied input is not properly validated.  This may allow an authenticated attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.
 - A NULL pointer dereference flaw exists in a parser structure that is triggered during the validation of stored procedure names.  This may allow an authenticated attacker to potentially cause the database to crash.

The version of MariaDB running on the remote host is 10.1.x prior to 10.1.9. It is, therefore, affected by the following vulnerabilities :

  - A flaw exists in the encryption subcomponent due to a     failure to properly handle faults associated with the     Chinese Remainder Theorem (CRT) process when allowing     ephemeral key exchange without low memory optimizations     on a server. An unauthenticated, remote attacker can     exploit this to disclose private RSA keys by capturing     TLS handshakes. (CVE-2015-7744)

  - An unspecified flaw exists in the InnoDB subcomponent     that allows an authenticated, remote attacker to cause a     denial of service. (CVE-2016-0610)

  - An unspecified flaw exists in the Option subcomponent     that allows an authenticated, remote attacker to gain     elevated privileges. (CVE-2016-3471)

  - A flaw exists in the check_fk_parent_table_access()     function in sql_parse.cc that is triggered when     performing database name conversions. An authenticated,     remote attacker can exploit this to crash the database,     resulting in a denial of service.

  - A flaw exists in the gis_field_options_read() function     in field.cc that is triggered during the handling of the      GIS feature. An authenticated, remote attacker can     exploit this to crash the database, resulting in a     denial of service.

  - An unspecified flaw exists in the init_read_record_idx()     function that is triggered when handling errors. An     authenticated, remote attacker can exploit this to cause     a denial of service.

  - An overflow condition exists in the XMLColumns()     function in tabxml.cpp due to improper validation of     user-supplied input. An authenticated, remote attacker     can exploit this to cause a buffer overflow, resulting     in a denial of service condition or the execution of     arbitrary code.

  - An unspecified flaw exists that is triggered when     handling UPDATE queries with JOIN. An authenticated,     remote attacker can exploit this to crash the database,     resulting in a denial of service.

  - An unspecified flaw exists that is triggered during the     handling of 'View' or 'Derived' fields. An     authenticated, remote attacker can exploit this to crash     the database, resulting in a denial of service.

  - A flaw exists in the row_merge_sort() function that is     triggered when handling FT-index creation. An     authenticated, remote attacker can exploit this to crash     the database, resulting in a denial of service.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Oracle reports :

The quarterly Critical Patch Update contains 22 new security fixes for Oracle MySQL 5.5.49, 5.6.30, 5.7.13 and earlier

The version of MySQL running on the remote host is 5.6.x prior to 5.6.31. It is, therefore, affected by multiple vulnerabilities :

  - A heap buffer overflow condition exists in the     EVP_EncodeUpdate() function within file     crypto/evp/encode.c that is triggered when handling     a large amount of input data. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition. (CVE-2016-2105)

  - An unspecified flaw exists in the Security: Encryption     subcomponent that allows an unauthenticated, remote     attacker to disclose sensitive information.
    (CVE-2016-3452)

  - An unspecified flaw exists in the InnoDB subcomponent     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-3459)

  - An unspecified flaw exists in the Options subcomponent     that allows a local attacker to gain elevated     privileges. (CVE-2016-3471)

  - An unspecified flaw exists in the Parser subcomponent     that allows a local attacker to gain elevated     privileges. (CVE-2016-3477)

  - An unspecified flaw exists in the FTS subcomponent that     allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-3486)

  - An unspecified flaw exists in the Optimizer subcomponent     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-3501)

  - An unspecified flaw exists in the Types subcomponent     that allows an authenticated, remote attacker to cause     a denial of service condition. (CVE-2016-3521)

  - An unspecified flaw exists in the Security: Encryption     subcomponent that allows an authenticated, remote     attacker to cause a denial of service condition.
    (CVE-2016-3614)

  - An unspecified flaw exists in the DML subcomponent that     allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-3615)

  - An unspecified flaw exists in the Privileges     subcomponent that allows an authenticated, remote     attacker to cause a denial of service condition.
    (CVE-2016-5439)

  - An unspecified flaw exists in the RBR subcomponent that     allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-5440)

  - An unspecified flaw exists in the Connection     subcomponent that allows an unauthenticated, remote     attacker to disclose sensitive information.
    (CVE-2016-5444)

  - An unspecified flaw exists in the InnoDB Plugin     subcomponent that allows an authenticated, remote     attacker to impact integrity. (CVE-2016-8288)

  - Multiple overflow conditions exist due to improper     validation of user-supplied input. An authenticated,     remote attacker can exploit these issues to cause a     denial of service condition or the execution of     arbitrary code.

  - A NULL pointer dereference flaw exists in a parser     structure that is triggered during the validation of     stored procedure names. An authenticated, remote     attacker can exploit this to crash the database,     resulting in a denial of service condition.

  - Multiple overflow conditions exist in the InnoDB     memcached plugin due to improper validation of     user-supplied input. An authenticated, remote attacker     can exploit these issues to cause a denial of service     condition or the execution of arbitrary code.

  - An unspecified flaw exists that is triggered when     invoking Enterprise Encryption functions in multiple     threads simultaneously or after creating and dropping     them. An authenticated, remote attacker can exploit this     to crash the database, resulting in a denial of service     condition.

  - An unspecified flaw exists that is triggered when     handling a 'SELECT ... GROUP BY ... FOR UPDATE' query     executed with a loose index scan. An authenticated,     remote attacker can exploit this to crash the database,     resulting in a denial of service condition.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL running on the remote host is 5.5.x prior to 5.5.50. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the Security: Encryption     subcomponent that allows an unauthenticated, remote     attacker to disclose potentially sensitive information.
    No other details are available. (CVE-2016-3452)

  - An unspecified flaw exists in the Options subcomponent     that allows a local attacker to gain elevated     privileges. No other details are available.
    (CVE-2016-3471)

  - An unspecified flaw exists in the Parser subcomponent     that allows a local attacker to gain elevated     privileges. No other details are available.
    (CVE-2016-3477)

  - An unspecified flaw exists in the Types subcomponent     that allows an authenticated, remote attacker to cause     a denial of service condition. No other details are     available. (CVE-2016-3521)

  - An unspecified flaw exists in the DML subcomponent that     allows an authenticated, remote attacker to cause a     denial of service condition. No other details are     available. (CVE-2016-3615)

  - An unspecified flaw exists in the RBR subcomponent that     allows an authenticated, remote attacker to cause a     denial of service condition. No other details are     available. (CVE-2016-5440)

  - An unspecified flaw exists in the Connection     subcomponent that allows an unauthenticated, remote     attacker to disclose potentially sensitive information.
    No other details are available. (CVE-2016-5444)

  - Multiple overflow conditions exist due to improper     validation of user-supplied input. An authenticated,     remote attacker can exploit these issues to cause a     denial of service condition or the execution of     arbitrary code.

  - A NULL pointer dereference flaw exists in a parser     structure that is triggered during the validation of     stored procedure names. An authenticated, remote     attacker can exploit this to crash the database,     resulting in a denial of service condition.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.46 or 5.6.x prior to 5.6.27 and is affected by vulnerabilities in the following components :

- :

 - Client Programs
 - Data Definition Language
 - Data Manipulation Language
 - InnoDB
 - Option
 - Partition
 - Query Cache
 - Security:Privileges
 - Server Parser
 - Server Partition
 - Stored Procedures
 - Types

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0534 advisory.

  - mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) (CVE-2015-4792,     CVE-2015-4802)

  - mysql: unspecified vulnerability related to Server:DDL (CPU October 2015) (CVE-2015-4815)

  - mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) (CVE-2015-4816,     CVE-2015-4861)

  - mysql: unspecified vulnerability related to Client programs (CPU October 2015) (CVE-2015-4819)

  - mysql: unspecified vulnerability related to Server:Types (CPU October 2015) (CVE-2015-4826)

  - mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015) (CVE-2015-4830)

  - mysql: unspecified vulnerability related to Server:SP (CPU October 2015) (CVE-2015-4836)

  - mysql: unspecified vulnerability related to Server:DML (CPU October 2015) (CVE-2015-4858, CVE-2015-4879,     CVE-2015-4913)

  - mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) (CVE-2015-4870)

  - mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016) (CVE-2016-0505)

  - mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016) (CVE-2016-0546)

  - mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) (CVE-2016-0596,     CVE-2016-0598)

  - mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016) (CVE-2016-0597,     CVE-2016-0616)

  - mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016) (CVE-2016-0600)

  - mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016)     (CVE-2016-0606)

  - mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016) (CVE-2016-0608)

  - mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016)     (CVE-2016-0609)

  - mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016) (CVE-2016-0642)

  - mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016) (CVE-2016-0651)

  - mysql: ssl-validate-cert incorrect hostname check (CVE-2016-2047)

  - mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016) (CVE-2016-3471)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2016:0534 :

An update for mariadb is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a newer upstream version:
MariaDB (5.5.47). Refer to the MariaDB Release Notes listed in the References section for a complete list of changes.

Security Fix(es) :

* It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a client. (CVE-2016-2047)

* This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section.
(CVE-2015-4792, CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2016-0505, CVE-2016-0546, CVE-2016-0596, CVE-2016-0597, CVE-2016-0598, CVE-2016-0600, CVE-2016-0606, CVE-2016-0608, CVE-2016-0609, CVE-2016-0616)

Bug Fix(es) :

* When more than one INSERT operation was executed concurrently on a non-empty InnoDB table with an AUTO_INCREMENT column defined as a primary key immediately after starting MariaDB, a race condition could occur. As a consequence, one of the concurrent INSERT operations failed with a 'Duplicate key' error message. A patch has been applied to prevent the race condition. Now, each row inserted as a result of the concurrent INSERT operations receives a unique primary key, and the operations no longer fail in this scenario. (BZ#1303946)

An update for mariadb is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a newer upstream version:
MariaDB (5.5.47). Refer to the MariaDB Release Notes listed in the References section for a complete list of changes.

Security Fix(es) :

* It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a client. (CVE-2016-2047)

* This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section.
(CVE-2015-4792, CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2016-0505, CVE-2016-0546, CVE-2016-0596, CVE-2016-0597, CVE-2016-0598, CVE-2016-0600, CVE-2016-0606, CVE-2016-0608, CVE-2016-0609, CVE-2016-0616)

Bug Fix(es) :

* When more than one INSERT operation was executed concurrently on a non-empty InnoDB table with an AUTO_INCREMENT column defined as a primary key immediately after starting MariaDB, a race condition could occur. As a consequence, one of the concurrent INSERT operations failed with a 'Duplicate key' error message. A patch has been applied to prevent the race condition. Now, each row inserted as a result of the concurrent INSERT operations receives a unique primary key, and the operations no longer fail in this scenario. (BZ#1303946)

The version of MariaDB running on the remote host is prior to 5.5.46.
It is, therefore, affected by the following vulnerabilities :

  - Multiple unspecified flaws exist related to the     Partition subcomponent that allow an authenticated,     remote attacker to cause a denial of service.
    (CVE-2015-4802, CVE-2015-4792)

  - An unspecified flaw exists related to the Query Cache     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2015-4807)

  - An unspecified flaw exists related to the DDL     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2015-4815)

  - An unspecified flaw exists related to the Types     subcomponent that allows an authenticated, remote     attacker to gain access to sensitive information.
    (CVE-2015-4826)

  - An unspecified flaw exists related to the     Security:Privileges subcomponent that allows an     authenticated, remote attacker to affect the integrity     of the system. No other details are available.
    (CVE-2015-4830)

  - An unspecified flaw exists related to the SP     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2015-4836)

  - Multiple unspecified flaws exist related to the DML     subcomponent that allow an authenticated, remote     attacker to cause a denial of service. (CVE-2015-4858,     CVE-2015-4913)

  - An unspecified flaw exists related to the InnoDB     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2015-4861)

  - An unspecified flaw exists related to the Parser     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2015-4870)

  - A flaw exists in the mysql_prepare_create_table()     function due to improper handling of a comma buffer that     is greater than zero. An authenticated, remote attacker     can exploit this to cause a denial of service condition.

The version of MariaDB running on the remote host is 10.0.x prior to 10.0.22. It is, therefore, affected by multiple vulnerabilities :

  - Multiple denial of service vulnerabilities exist due to     multiple unspecified flaws in the 'Server : Partition'     subcomponent. An authenticated, remote attacker can     exploit these flaws to affect availability.
    (CVE-2015-4792, CVE-2015-4802)

  - A denial of service vulnerability exists due to an     unspecified flaw in the Query Cache subcomponent. An     authenticated, remote attacker can exploit this to     affect availability. (CVE-2015-4807)

  - A denial of service vulnerability exists due to an     unspecified flaw in the DDL subcomponent. An     authenticated, remote attacker can exploit this to     affect availability. (CVE-2015-4815)

  - An information disclosure vulnerability exists due to an     unspecified flaw in the Types subcomponent. An     authenticated, remote attacker can exploit this to gain     access to sensitive information. (CVE-2015-4826)

  - An unspecified vulnerability exists due to an     unspecified flaw in the 'Security : Privileges'     subcomponent. An authenticated, remote attacker can     exploit this to affect integrity. (CVE-2015-4830)

  - A denial of service vulnerability exists due to an     unspecified flaw in the SP subcomponent. An     authenticated, remote attacker can exploit this to     affect availability. (CVE-2015-4836)

  - Multiple denial of service vulnerabilities exist due to     multiple unspecified flaws in the DML subcomponent. An     authenticated, remote attacker can exploit these flaws     to affect availability. (CVE-2015-4858, CVE-2015-4913)

  - A denial of service vulnerability exists due to an     unspecified flaw in the InnoDB subcomponent. An     authenticated, remote attacker can exploit this to     affect availability. (CVE-2015-4861)

  - A denial of service vulnerability exists due to an     unspecified flaw in the 'Server : Parser' subcomponent.
    An authenticated, remote attacker can exploit this to     affect availability. (CVE-2015-4870)

  - A denial of service vulnerability exists due to a flaw     in the ha_partition::index_init() function that is     triggered when handling the priority queue. An     authenticated, remote attacker can exploit this, via a     specially crafted query, to cause the database to crash.

  - A denial of service vulnerability exists due to a flaw     in the Item_field::fix_outer_field() function that is     triggered when handling PREPARE statements. An     authenticated, remote attacker can exploit this, via a     specially crafted query, to cause the database to crash.

  - A denial of service vulnerability exists due to a flaw     in the convert_kill_to_deadlock_error() function that is     triggered when handling rollbacks. An authenticated,     remote attacker can exploit this, via a specially     crafted query, to cause the database to crash.

  - A denial of service vulnerability exists due to a flaw     in the no_rows_in_result() function that is triggered     when handling logical conditions. An authenticated,     remote attacker can exploit this, via a specially     crafted query, to cause the database to crash.

  - A denial of service vulnerability exists due to a flaw     in the handle_grant_struct() function that is triggered     when handling HASH updates. An authenticated, remote     attacker can exploit this, via a specially crafted     query, to cause the database to crash.

  - A denial of service vulnerability exists due to a flaw     in the is_invalid_role_name() function that is triggered     when handling ACLs with blank role names. An     authenticated, remote attacker can exploit this, via a     specially crafted query, to cause the database to crash.

  - A denial of service vulnerability exists due to a flaw     in the Item_direct_view_ref class that is triggered     when handling SELECT queries. An authenticated, remote     attacker can exploit this, via a specially crafted     query, to cause the database to crash.

  - A denial of service vulnerability exists due to a flaw     in the opt_sum_query() function that is triggered when     handling constant tables. An authenticated, remote     attacker can exploit this, via a specially crafted     query, to cause the database to crash.

The version of Oracle MySQL installed on the remote host is 5.6.x prior to 5.6.27. It is, therefore, affected by the following vulnerabilities :

  - An unspecified flaw exists in the Types subcomponent.
    An authenticated, remote attacker can exploit this to     gain access to sensitive information. (CVE-2015-4826)

  - An unspecified flaw exists in the Security:Privileges     subcomponent. An authenticated, remote attacker can     exploit this to impact integrity. (CVE-2015-4830)

  - An unspecified flaw exists in the Security:Encryption     subcomponent. An unauthenticated, remote attacker can     exploit this to gain access to sensitive information.
    (CVE-2015-7744)

  - An unspecified flaw exists in the Options subcomponent     that allows a local attacker to gain elevated     privileges. (CVE-2016-3471)

Additionally, unspecified denial of service vulnerabilities exist in the following MySQL subcomponents :

  - DDL (CVE-2015-4815)

  - DML (CVE-2015-4858, CVE-2015-4862, CVE-2015-4913)

  - General (CVE-2016-0605)

  - InnoDB (CVE-2015-4861)

  - Memcached (CVE-2015-4910)

  - Optimizer (CVE-2015-4800)

  - Parser (CVE-2015-4870)

  - Partition (CVE-2015-4792, CVE-2015-4802)

  - Replication (CVE-2015-4890)

  - Security:Privileges (CVE-2015-4791)

  - SP (CVE-2015-4836)

The version of Oracle MySQL installed on the remote host is 5.5.x prior to 5.5.46. It is, therefore, affected by the following vulnerabilities :

  - An unspecified flaw exists in the Types subcomponent.
    An authenticated, remote attacker can exploit this to     gain access to sensitive information. (CVE-2015-4826)

  - An unspecified flaw exists in the Security:Privileges     subcomponent. An authenticated, remote attacker can     exploit this to impact integrity. (CVE-2015-4830)

  - An unspecified flaw exists in the Security:Encryption     subcomponent. An unauthenticated, remote attacker can     exploit this to gain access to sensitive information.
    (CVE-2015-7744)

  - An unspecified flaw exists in the Options subcomponent     that allows a local attacker to gain elevated     privileges. (CVE-2016-3471)

Additionally, unspecified denial of service vulnerabilities exist in the following MySQL subcomponents :

  - DDL (CVE-2015-4815)

  - DML (CVE-2015-4858, CVE-2015-4913)

  - InnoDB (CVE-2015-4861)

  - Parser (CVE-2015-4870)

  - Partition (CVE-2015-4792, CVE-2015-4802)

  - SP (CVE-2015-4836)

ID	Name	Product	Family	Severity
199093	RHEL 6 : mysql55-mysql (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199040	RHEL 5 : mysql55-mysql (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196701	RHEL 5 : mysql (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196649	RHEL 6 : mysql (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
193833	RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2016:1132)	Nessus	Red Hat Local Security Checks	critical
9608	Oracle MySQL 5.5.x < 5.5.50 Multiple Vulnerabilities	Nessus Network Monitor	Database	high
93718	MariaDB 10.1.x < 10.1.9 Multiple Vulnerabilities	Nessus	Databases	high
92505	FreeBSD : MySQL -- Multiple vulnerabilities (ca5cb202-4f51-11e6-b2ec-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	high
91995	MySQL 5.6.x < 5.6.31 Multiple Vulnerabilities	Nessus	Databases	high
91993	MySQL 5.5.x < 5.5.50 Multiple Vulnerabilities (July 2016 CPU)	Nessus	Databases	high
91996	Oracle MySQL 5.6.x < 5.6.31 Multiple Vulnerabilities	Nessus	Databases	high
9252	Oracle MySQL 5.5.x < 5.5.46 / 5.6.x < 5.6.27 Multiple Vulnerabilities	Nessus Network Monitor	Database	high
90300	RHEL 7 : mariadb (RHSA-2016:0534)	Nessus	Red Hat Local Security Checks	high
90296	Oracle Linux 7 : mariadb (ELSA-2016-0534)	Nessus	Oracle Linux Local Security Checks	high
90276	CentOS 7 : mariadb (CESA-2016:0534)	Nessus	CentOS Local Security Checks	high
87210	MariaDB < 5.5.46 Multiple Vulnerabilities	Nessus	Databases	high
86874	MariaDB 10.0.x < 10.0.22 Multiple Vulnerabilities	Nessus	Databases	high
86661	Oracle MySQL 5.6.x < 5.6.27 Multiple Vulnerabilities (October 2015 CPU) (January 2016 CPU) (July 2016 CPU)	Nessus	Databases	high
86658	Oracle MySQL 5.5.x < 5.5.46 Multiple Vulnerabilities (October 2015 CPU) (January 2016 CPU) (July 2016 CPU)	Nessus	Databases	high

Detections

Analytics

CVE-2016-3471

high

Tenable Plugins

high

critical

critical

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high