The version of MariaDB running on the remote host is 5.5.x prior to 5.5.47. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the Server : Options     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2016-0505)

  - An unspecified flaw exists in the Client subcomponent     that allows a local attacker to gain elevated     privileges. (CVE-2016-0546)

  - An unspecified flaw exists in the Server : DML     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2016-0596)

  - Multiple unspecified flaws exist in the Server :
    Optimizer subcomponent that allows an authenticated,     remote attacker to cause a denial of service.
    (CVE-2016-0597, CVE-2016-0598, CVE-2016-0616)

  - An unspecified flaw exists in the Server : InnoDB     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2016-0600)

  - An unspecified flaw exists in the Server : Security :
    Encryption subcomponent that allows an authenticated,     remote attacker to impact integrity. (CVE-2016-0606,     CVE-2016-0609)

  - An unspecified flaw exists in the Server : UDF     subcomponent that allows an authenticated, remote     attacker to cause a denial of service. (CVE-2016-0608)     
  - A security bypass vulnerability exists due to an     incorrect implementation of the --ssl-verify-server-cert     option. A man-in-the-middle attacker can exploit this to     replace the server SSL certificate, resulting in a     bypass of the client-side hostname verification.
    (MDEV-9212)

Detections

Analytics

MariaDB 5.5 < 5.5.47 Multiple Vulnerabilities

high Nessus Plugin ID 87727

Version 1.16

Version 1.15

Version 1.16 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.15 Nov 19, 2022, 3:53 AM CVE CVSS metrics CVSSv2 score source (Changed from None to CVE-2016-0546) CVSSv3 score source (Changed from None to CVE-2016-2047) CVSSv3 severity (Based on CVE-2016-2047 severity decreased from High to Medium) Plugin Feed: 202211190353