Detections
Analytics
openSUSE Security Update : mariadb (openSUSE-2018-33)
medium Nessus Plugin ID 106062
Language:
Synopsis
The remote openSUSE host is missing a security update.Description
This update for mariadb fixes several issues.These security issues were fixed :
- CVE-2017-3636: Client programs had an unspecified vulnerability that could lead to unauthorized access and denial of service (bsc#1049399)
- CVE-2017-3641: DDL unspecified vulnerability could lead to denial of service (bsc#1049404)
- CVE-2017-3653: DML Unspecified vulnerability could lead to unauthorized database access (bsc#1049417)
These non-security issues were fixed :
- Add ODBC support for Connect engine (bsc#1039034)
- Relax required version for mariadb-errormessages (bsc#1072665)
This update was imported from the SUSE:SLE-12-SP1:Update update project.
Solution
Update the affected mariadb packages.See Also
https://bugzilla.opensuse.org/show_bug.cgi?id=1039034
https://bugzilla.opensuse.org/show_bug.cgi?id=1049399
https://bugzilla.opensuse.org/show_bug.cgi?id=1049404
https://bugzilla.opensuse.org/show_bug.cgi?id=1049417
Plugin Details
Severity: Medium
ID: 106062
File Name: openSUSE-2018-33.nasl
Version: 3.4
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 1/16/2018
Updated: 1/19/2021
Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 4.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:mariadb-test-debuginfo, p-cpe:/a:novell:opensuse:mariadb-debuginfo, p-cpe:/a:novell:opensuse:mariadb-test, p-cpe:/a:novell:opensuse:mariadb-tools-debuginfo, p-cpe:/a:novell:opensuse:mariadb-tools, p-cpe:/a:novell:opensuse:libmysqlclient_r18-32bit, p-cpe:/a:novell:opensuse:mariadb-client, p-cpe:/a:novell:opensuse:libmysqlclient-devel, p-cpe:/a:novell:opensuse:libmysqld18, p-cpe:/a:novell:opensuse:mariadb-bench-debuginfo, p-cpe:/a:novell:opensuse:libmysqlclient18-32bit, cpe:/o:novell:opensuse:42.2, p-cpe:/a:novell:opensuse:mariadb-bench, p-cpe:/a:novell:opensuse:libmysqlclient18-debuginfo, p-cpe:/a:novell:opensuse:mariadb-client-debuginfo, p-cpe:/a:novell:opensuse:mariadb, cpe:/o:novell:opensuse:42.3, p-cpe:/a:novell:opensuse:libmysqld-devel, p-cpe:/a:novell:opensuse:libmysqlclient18-debuginfo-32bit, p-cpe:/a:novell:opensuse:mariadb-debugsource, p-cpe:/a:novell:opensuse:libmysqlclient_r18, p-cpe:/a:novell:opensuse:libmysqld18-debuginfo, p-cpe:/a:novell:opensuse:libmysqlclient18, p-cpe:/a:novell:opensuse:mariadb-errormessages
Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu
Patch Publication Date: 1/15/2018