Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA Transactions.

This version upgrade of mysql to 5.5.33 fixed multiple security issues :

  - CVE-2013-1861 / CVE-2013-3783 / CVE-2013-3793 /     CVE-2013-3794

  - CVE-2013-3795 / CVE-2013-3796 / CVE-2013-3798 /     CVE-2013-3801

  - CVE-2013-3802 / CVE-2013-3804 / CVE-2013-3805 /     CVE-2013-3806

  - CVE-2013-3807 / CVE-2013-3808 / CVE-2013-3809 /     CVE-2013-3810

  - Additionally, it contains numerous bug fixes and     improvements.:. (CVE-2013-3811 / CVE-2013-3812)

  - fixed mysqldump with MySQL 5.0. (bnc#768832)

  - fixed log rights. (bnc#789263 and bnc#803040 and     bnc#792332)

  - binlog disabled in default configuration. (bnc#791863)

  - fixed dependencies for client package. (bnc#780019)

  - minor polishing of spec/installation

  - avoid file conflicts with mytop

  - better fix for hard-coded libdir issue

  - fixed hard-coded plugin paths. (bnc#834028)

  - use chown --no-dereference instead of chown to improve     security. (bnc#834967)

  - adjust to spell !includedir correctly in /etc/my.cnf.
    (bnc#734436)

  - typo in init script stops database on update     (bnc#837801)

This version upgrade of mysql to 5.5.32 fixes multiple security issues :

CVE-2013-1861 / CVE-2013-3783 / CVE-2013-3793 / CVE-2013-3794 / CVE-2013-3795 / CVE-2013-3796 / CVE-2013-3798 / CVE-2013-3801 / CVE-2013-3802 / CVE-2013-3804 / CVE-2013-3805 / CVE-2013-3806 / CVE-2013-3807 / CVE-2013-3808 / CVE-2013-3809 / CVE-2013-3810 / CVE-2013-3811 / CVE-2013-3812

Additionally, it contains numerous bug fixes and improvements. :

  - making mysqldump work with MySQL 5.0. (bnc#768832)

  - fixed log rights. (bnc#789263 and bnc#803040)

  - binlog disabled in default configuration. (bnc#791863)

  - fixed dependencies for client package. (bnc#780019)

  - minor polishing of spec/installation

  - avoiding file conflicts with mytop

  - better fix for hardcoded libdir issue

  - fix hardcoded plugin paths. (bnc#834028)

  - Use chown --no-dereference instead of chown to improve     security. (bnc#834967)

  - Adjust to spell !includedir correctly in /etc/my.cnf     (bnc#734436)

The version of MySQL installed on the remote host is earlier than 5.6.12. Therefore, affected by vulnerabilities in the following components :

 - Audit Log

  - Data Manipulation Language

  - Full Text Search

  - GIS

  - InnoDB

  - MemCached

  - Server Optimizer

  - Server Privileges

  - Server Replication

  - XA Transactions

  - 'Server Options' sub component (for MySQL versions earlier than and up to 5.5.30, as well as 5.6.10)

  - The 'Prepared Statements' sub component (for MySQL versions earlier than and up to 5.5.30, as well as 5.6.10)

The version of MySQL installed on the remote host is 5.6.x older than 5.6.12.  As such, it is reportedly affected by vulnerabilities in the following components :

  - Audit Log
  - Data Manipulation Language
  - Full Text Search
  - GIS
  - InnoDB
  - Locking
  - MemCached
  - Server Optimizer
  - Server Privileges
  - Server Replication
  - XA Transactions

ID	Name	Product	Family	Severity
70328	SuSE 11.3 Security Update : mysql, mysql-client (SAT Patch Number 8364)	Nessus	SuSE Local Security Checks	medium
69511	SuSE 11.3 Security Update : MySQL (SAT Patch Number 8217)	Nessus	SuSE Local Security Checks	medium
6934	Oracle MySQL 5.6.x < 5.6.12 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
68939	MySQL 5.6.x < 5.6.12 Multiple Vulnerabilities	Nessus	Databases	medium

Detections

Analytics

CVE-2013-3810

medium

Tenable Plugins

medium

medium

medium

medium