Detections
Analytics
MariaDB 10.1.x < 10.1.19 Multiple Vulnerabilities
medium Nessus Plugin ID 95541
Language:
Synopsis
The remote database server is affected by multiple vulnerabilities.Description
The version of MariaDB running on the remote host is 10.1.x prior to 10.1.19. It is, therefore, affected by multiple vulnerabilities :- An unspecified flaw exists in the Security: Encryption subcomponent that allows an authenticated, remote attacker to disclose sensitive information.
(CVE-2016-5584)
- A flaw exists in wolfSSL, specifically within the C software version of AES Encryption and Decryption, due to table lookups not properly considering cache-bank access times. A local attacker can exploit this, via a specially crafted application, to disclose AES keys.
Note that this vulnerability does not affect MariaDB packages included in Red Hat products since they're built against system OpenSSL packages. (CVE-2016-7440)
- A flaw exists in the fill_alter_inplace_info() function in sql_table.cc that is triggered when altering persistent virtual columns. An authenticated, remote attacker can exploit this to crash the database, resulting in a denial of service condition.
- A flaw exists in the mysql_rm_table_no_locks() function in sql_table.cc that is triggered during the handling of CREATE OR REPLACE TABLE queries. An authenticated, remote attacker can exploit this to crash the database, resulting in a denial of service condition.
- A flaw exists in the buf_page_is_checksum_valid* functions in buf0buf.cc that is triggered during the handling of encrypted information. An authenticated, remote attacker can exploit this to crash the database, resulting in a denial of service condition.
- A flaw exists in the wsrep_replicate_myisam functionality that is triggered when dropping MyISAM tables. An authenticated, remote attacker can exploit this to crash the database, resulting in a denial of service condition.
Solution
Upgrade to MariaDB version 10.1.19 or later.See Also
https://mariadb.com/kb/en/library/mariadb-10119-changelog/
https://mariadb.com/kb/en/library/mariadb-10119-release-notes/
Plugin Details
Severity: Medium
ID: 95541
File Name: mariadb_10_1_19.nasl
Version: 1.8
Type: remote
Family: Databases
Published: 12/5/2016
Updated: 11/18/2022
Configuration: Enable paranoid mode
Supported Sensors: Frictionless Assessment Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6
Temporal Score: 4.4
Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P
CVSS Score Source: CVE-2017-3600
CVSS v3
Risk Factor: Medium
Base Score: 6.6
Temporal Score: 5.8
Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:mariadb:mariadb
Required KB Items: Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 11/7/2016
Vulnerability Publication Date: 9/17/2016
Reference Information
CVE: CVE-2016-5483, CVE-2016-5584, CVE-2016-7440, CVE-2017-3600, CVE-2017-3651