A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:5500 advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2019-2938)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

  - libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an     OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for     MySQL, this issue does not affect any MySQL components supported by Oracle. (CVE-2020-13249)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions     that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2020-14765)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2020-14776)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions     that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2020-14789)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions     that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable     vulnerability allows high privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2020-14812)

  - A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method`     allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on     galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw     affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.
    (CVE-2020-15180)

  - Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are     affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability     allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Client. (CVE-2020-2574)

  - Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are     affected are 5.6.47 and prior, 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability     allows low privileged attacker with network access via multiple protocols to compromise MySQL Client.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Client. (CVE-2020-2752)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of     MySQL Server accessible data. (CVE-2020-2760)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions     that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2020-2780)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported     versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable     vulnerability allows high privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2020-2812)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 5.6.47 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability     allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. (CVE-2020-2814)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability     allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. (CVE-2021-2022)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions     that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in takeover of MySQL Server. (CVE-2021-2144)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2021-2194)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5246 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is     binary-compatible with MySQL.

    The following packages have been upgraded to a later upstream version: rh-mariadb103-mariadb (10.3.27),     rh-mariadb103-galera (25.3.31). (BZ#1894122, BZ#1894124)

    Security Fix(es):

    * mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

    * mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)

    * mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)

    * mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)

    * mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)

    * mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

    * mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

    * mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2922)

    * mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

    * mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

    * mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * mysqld_safe --dry-run doesn't work as expected (BZ#1894105)

    Enhancement(s):

    * [RFE] create separate package providing ha_connect.so plugin for mariadb-server in SCL (BZ#1894114)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5500 advisory.

  - mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

  - mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

  - mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765, CVE-2020-14789)

  - mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

  - mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

  - mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

  - mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

  - mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

  - mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760, CVE-2020-2814)

  - mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

  - mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

  - mysql: InnoDB unspecified vulnerability (CPU Jan 2021) (CVE-2021-2022)

  - mysql: Server: Parser unspecified vulnerability (CPU Apr 2021) (CVE-2021-2144)

  - mysql: InnoDB unspecified vulnerability (CPU Apr 2021) (CVE-2021-2194)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5663 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera     (25.3.31). (BZ#1899085, BZ#1899089)

    Security Fix(es):

    * mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

    * mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2510)

    * mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2537)

    * mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)

    * mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)

    * mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)

    * mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)

    * mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

    * mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

    * mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2922)

    * mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

    * mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

    * mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * FTBFS: -D_GLIBCXX_ASSERTIONS (BZ#1899012)

    * Queries with entity_id IN ('1', '2', , '70000') run much slower in MariaDB 10.3 than on MariaDB 10.1     (BZ#1899020)

    * Cleanup race with wsrep_rsync_sst_tunnel may prevent full galera cluster bootstrap (BZ#1899025)

    * There are undeclared file conflicts in several mariadb and mysql packages (BZ#1899080)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5665 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera     (25.3.31). (BZ#1899084, BZ#1899088)

    Security Fix(es):

    * mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

    * mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

    * mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

    * mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

    * mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

    * mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * FTBFS: -D_GLIBCXX_ASSERTIONS (BZ#1899011)

    * Queries with entity_id IN ('1', '2', , '70000') run much slower in MariaDB 10.3 than on MariaDB 10.1     (BZ#1899019)

    * Cleanup race with wsrep_rsync_sst_tunnel may prevent full galera cluster bootstrap (BZ#1899024)

    * There are undeclared file conflicts in several mariadb and mysql packages (BZ#1899079)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5654 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera     (25.3.31). (BZ#1899083, BZ#1899087)

    Security Fix(es):

    * mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

    * mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

    * mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

    * mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

    * mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

    * mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * FTBFS: -D_GLIBCXX_ASSERTIONS (BZ#1899010)

    * Queries with entity_id IN ('1', '2', , '70000') run much slower in MariaDB 10.3 than on MariaDB 10.1     (BZ#1899018)

    * Cleanup race with wsrep_rsync_sst_tunnel may prevent full galera cluster bootstrap (BZ#1899022)

    * There are undeclared file conflicts in several mariadb and mysql packages (BZ#1899078)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5500 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera     (25.3.31). (BZ#1899082, BZ#1899086)

    Security Fix(es):

    * mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

    * mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

    * mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

    * mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

    * mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

    * mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * FTBFS: -D_GLIBCXX_ASSERTIONS (BZ#1899009)

    * Queries with entity_id IN ('1', '2', , '70000') run much slower in MariaDB 10.3 than on MariaDB 10.1     (BZ#1899017)

    * Cleanup race with wsrep_rsync_sst_tunnel may prevent full galera cluster bootstrap (BZ#1899021)

    * There are undeclared file conflicts in several mariadb and mysql packages (BZ#1899077)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5500 advisory.

    asio     [1.10.8-7]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

    [1.10.8-6]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

    [1.10.8-5]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

    [1.10.8-4]
    - Rebuilt for Boost 1.64

    [1.10.8-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

    [1.10.8-2]
    - Rebuilt for Boost 1.63

    [1.10.8-1]
    - Update to 1.10.8

    [1.10.7-1]
    - Update to 1.10.7

    [1.10.6-7]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

    [1.10.6-6]
    - Rebuilt for Boost 1.60

    [1.10.6-5]
    - Remove useless pieces of the spec
    - Conform to more recent SPEC style
    - Fix date in changelog that was giving warnings

    [1.10.6-4]
    - Move from define to global

    [1.10.6-3]
    - Rebuilt for Boost 1.59

    [1.10.6-2]
    - Rebuilt for https://fedoraproject.org/wiki/Changes/F23Boost159

    [-1.10.6-1]
    - Update to 1.10.6 version

    [1.10.4-5]
    - rebuild for Boost 1.58

    [1.10.4-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

    [1.10.4-3]
    - Rebuild for boost 1.57.0

    [1.10.4-2]
    - Forgot to update the commit id

    [1.10.4-1]
    - Update to 1.10.4 version

    [1.10.3-1]
    - Update to 1.10.3 version

    [1.4.8-9]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

    [1.4.8-8]
    - Rebuild for boost 1.55.0

    [1.4.8-7]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

    [1.4.8-6]
    - Rebuild for boost 1.54.0

    [1.4.8-5]
    - Rebuild for Boost-1.53.0

    [1.4.8-4]
    - Rebuild for Boost-1.53.0

    [1.4.8-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

    [1.4.8-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

    [1.4.8-1]
    - Update to 1.4.8 bugfix release

    [1.4.1-4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

    [1.4.1-3]
    - fix FTBFS #538893 and #599857 (patch by Petr Machata)

    [1.4.1-2]
    - The tarball is now a gzip archive

    [1.4.1-1]
    - New upstream release

    [1.2.0-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

    [1.2.0-2]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

    [1.2.0-1]
    - New upstream release

    galera     [25.3.31-1]
    - Rebase to 25.3.31       Resolves: #1731289, #1856812

    Judy     mariadb     [3:10.3.27-3]
    - Remove mariadb_rpl.h from includedir       This file is shipped in mariadb-connector-c package
    - Require matching version of mariadb-connector-c package

    [3:10.3.27-2]
    - Disable building of the ed25519 client plugin.
      From now on it will be shipped by 'mariadb-connector-c' package

    [3:10.3.27-1]
    - Rebase to 10.3.27
    - mariadb-debug_build.patch is no more needed, upstream did the changes:
      https://github.com/MariaDB/server/commit/31eaa2029f3c2a4f8e5609ce8b87682286238d9a#diff-     32766783af7cac683980224d63c59929       https://github.com/MariaDB/server/commit/23c6fb3e6231b8939331e2d9f157092f24ed8f4f#diff-     78f3162f137407db5240950beb2bcd7c

    [3:10.3.23-1]
    - Rebase to 10.3.23
    - Make conflicts between corresponding mariadb and mysql packages explicit
    - Get rid of the Conflicts macro, it was intended to mark conflicts with
      *upstream* packages       Resolves: #1853159

    [3:10.3.22-1]
    - Rebase to 10.3.22

    [3:10.3.21-1]
    - Rebase to 10.3.21

    [3:10.3.20-2]
    - Change path of groonga's packaged files
    - Fix bz#1763287

    [3:10.3.20-1]
    - Rebase to 10.3.20
    - NOTE: 10.3.19 was deleted by upstream

    [3:10.3.18-1]
    - Rebase to 10.3.18

    [3:10.3.17-2]
    - Fix the debug build

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for mariadb fixes the following issues :

Update to 10.4.17 [bsc#1177472] and [bsc#1178428]

  - fixing for the following security vulnerabilities:
    CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,     CVE-2020-14789, CVE-2020-15180

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for mariadb fixes the following issues :

Update to 10.4.17 [bsc#1177472] and [bsc#1178428]

fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789, CVE-2020-15180

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for mariadb and mariadb-connector-c fixes the following issues :

Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180

Update mariadb-connector-c to 3.1.11 [bsc#1177472 and bsc#1178428]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5379 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary     compatible with MySQL. Galera is a synchronous multi-master cluster for     MariaDB.

    Security Fix(es):

    * mariadb-galera: mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep     (CVE-2020-15180)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for mariadb and mariadb-connector-c fixes the following issues :

  - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428]     fixing for the following security vulnerabilities:
    CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,     CVE-2020-14789 CVE-2020-15180

  - Update mariadb-connector-c to 3.1.11 [bsc#1177472 and     bsc#1178428]

This update was imported from the SUSE:SLE-15:Update update project.

This update for mariadb-connector-c fixes the following issues :

  - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428]     fixing for the following security vulnerabilities:
    CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,     CVE-2020-14789 CVE-2020-15180

  - Update mariadb-connector-c to 3.1.11 [bsc#1177472 and     bsc#1178428]

This update was imported from the SUSE:SLE-15:Update update project.

The remote host is affected by the vulnerability described in GLSA-202011-14 (MariaDB: Remote code execution)

    It was discovered that MariaDB did not properly validate the content of       a packet received from a server.
  Impact :

    A remote attacker could send a specially crafted packet to WSREP       service, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4603-1 advisory.

    It was discovered that MariaDB didn't properly validate the content of a packet received from a server. A     remote attacker could use this vulnerability to sent a specialy crafted file to cause a denial of service.
    (CVE-2020-13249)

    It was discovered that MariaDB has other security issues. An attacker can cause a hang or frequently     repeatable crash (denial of service). (CVE-2020-15180, CVE-2020-2752, CVE-2020-2760, CVE-2020-2812,     CVE-2020-2814)

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A security issue was discovered in the MariaDB database server.

For Debian 9 stretch, this problem has been fixed in version 10.1.47-0+deb9u1.

We recommend that you upgrade your mariadb-10.1 packages.

For the detailed security status of mariadb-10.1 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/mariadb-10.1

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A security issue was discovered in the MariaDB database server.

The MariaDB project reports :

Details of this vulnerability have not yet been disclosed

The version of MariaDB installed on the remote host is prior to 10.2.34. It is, therefore, affected by a vulnerability as referenced in the mdb-10234-rn advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 10.4.15. It is, therefore, affected by a vulnerability as referenced in the mdb-10415-rn advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 10.1.47. It is, therefore, affected by a vulnerability as referenced in the mdb-10147-rn advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 10.5.6. It is, therefore, affected by a vulnerability as referenced in the mdb-1056-rn advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 10.3.25. It is, therefore, affected by a vulnerability as referenced in the mdb-10325-rn advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184764	Rocky Linux 8 : mariadb:10.3 (RLSA-2020:5500)	Nessus	Rocky Linux Local Security Checks	critical
170298	RHEL 7 : rh-mariadb103-mariadb and rh-mariadb103-galera (RHSA-2020:5246)	Nessus	Red Hat Local Security Checks	critical
146017	CentOS 8 : mariadb:10.3 (CESA-2020:5500)	Nessus	CentOS Local Security Checks	critical
144555	RHEL 8 : mariadb:10.3 (RHSA-2020:5663)	Nessus	Red Hat Local Security Checks	critical
144550	RHEL 8 : mariadb:10.3 (RHSA-2020:5665)	Nessus	Red Hat Local Security Checks	critical
144548	RHEL 8 : mariadb:10.3 (RHSA-2020:5654)	Nessus	Red Hat Local Security Checks	critical
144418	RHEL 8 : mariadb:10.3 (RHSA-2020:5500)	Nessus	Red Hat Local Security Checks	critical
144375	Oracle Linux 8 : mariadb:10.3 (ELSA-2020-5500)	Nessus	Oracle Linux Local Security Checks	critical
144321	openSUSE Security Update : mariadb (openSUSE-2020-2254)	Nessus	SuSE Local Security Checks	critical
143812	SUSE SLES15 Security Update : mariadb (SUSE-SU-2020:3564-1)	Nessus	SuSE Local Security Checks	critical
143796	SUSE SLED15 / SLES15 Security Update : mariadb (SUSE-SU-2020:3500-1)	Nessus	SuSE Local Security Checks	critical
143738	SUSE SLES12 Security Update : mariadb (SUSE-SU-2020:3497-1)	Nessus	SuSE Local Security Checks	critical
143607	RHEL 7 : mariadb-galera (RHSA-2020:5379)	Nessus	Red Hat Local Security Checks	critical
143497	openSUSE Security Update : mariadb (openSUSE-2020-2149)	Nessus	SuSE Local Security Checks	critical
143319	openSUSE Security Update : mariadb-connector-c (openSUSE-2020-2090)	Nessus	SuSE Local Security Checks	critical
142846	GLSA-202011-14 : MariaDB: Remote code execution	Nessus	Gentoo Local Security Checks	critical
141921	Ubuntu 18.04 LTS / 20.04 LTS : MariaDB vulnerabilities (USN-4603-1)	Nessus	Ubuntu Local Security Checks	critical
141794	Debian DLA-2409-1 : mariadb-10.1 security update	Nessus	Debian Local Security Checks	critical
141725	Debian DSA-4776-1 : mariadb-10.3 - security update	Nessus	Debian Local Security Checks	critical
141512	FreeBSD : MariaDB -- Undisclosed vulnerability (a2565962-1156-11eb-9c9c-d4c9ef517024)	Nessus	FreeBSD Local Security Checks	critical
141205	MariaDB 10.2.0 < 10.2.34 A Vulnerability	Nessus	Databases	critical
141204	MariaDB 10.4.0 < 10.4.15 A Vulnerability	Nessus	Databases	critical
141203	MariaDB 10.1.0 < 10.1.47 A Vulnerability	Nessus	Databases	critical
141202	MariaDB 10.5.0 < 10.5.6 A Vulnerability	Nessus	Databases	critical
141198	MariaDB 10.3.0 < 10.3.25 A Vulnerability	Nessus	Databases	critical

Detections

Analytics

CVE-2020-15180

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical