The version of MySQL running on the remote host is 8.0.x prior to 8.0.20. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the April 2020 Critical Patch Update advisory:

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions   that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high   privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of   this vulnerability can result in takeover of MySQL Server. (CVE-2021-2144)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions   that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. This difficult to exploit   vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.
  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently   repeatable crash (complete DOS) of MySQL Server. (CVE-2020-2804)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported   versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. This easily exploitable   vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently   repeatable crash (complete DOS) of MySQL Server. (CVE-2020-2763)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A heap use-after-free flaw was found in curl versions     from 7.59.0 through 7.61.1 in the code related to     closing an easy handle. When closing and cleaning up an     'easy' handle in the `Curl_close()` function, the     library code first frees a struct (without nulling the     pointer) and might then subsequently erroneously write     to a struct field within that already freed     struct.(CVE-2018-16840)

  - CURL before 7.68.0 lacks proper input validation, which     allows users to create a `FILE:` URL that can make the     client access a remote file using SMB (Windows-only     issue).(CVE-2019-15601)

  - cURL and libcurl 7.18.0 through 7.32.0, when built with     OpenSSL, disables the certificate CN and SAN name field     verification (CURLOPT_SSL_VERIFYHOST) when the digital     signature verification (CURLOPT_SSL_VERIFYPEER) is     disabled, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid     certificate.(CVE-2013-4545)

  - The GnuTLS backend in libcurl 7.21.4 through 7.33.0,     when disabling digital signature verification     (CURLOPT_SSL_VERIFYPEER), also disables the     CURLOPT_SSL_VERIFYHOST check for CN or SAN host name     fields, which makes it easier for remote attackers to     spoof servers and conduct man-in-the-middle (MITM)     attacks.(CVE-2013-6422)

  - cURL and libcurl 7.1 before 7.36.0, when using the     OpenSSL, axtls, qsossl or gskit libraries for TLS,     recognize a wildcard IP address in the subject's Common     Name (CN) field of an X.509 certificate, which might     allow man-in-the-middle attackers to spoof arbitrary     SSL servers via a crafted certificate issued by a     legitimate Certification Authority.(CVE-2014-0139)

  - The (1) mbed_connect_step1 function in     lib/vtls/mbedtls.c and (2) polarssl_connect_step1     function in lib/vtls/polarssl.c in cURL and libcurl     before 7.49.0, when using SSLv3 or making a TLS     connection to a URL that uses a numerical IP address,     allow remote attackers to spoof servers via an     arbitrary valid certificate.(CVE-2016-3739)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Oracle reports :

This Critical Patch Update contains 45 new security patches for Oracle MySQL. 9 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials.

MariaDB reports 4 of these vulnerabilities exist in their software

The version of MySQL running on the remote host is 5.7.x prior to 5.7.30. It is, therefore, affected by multiple vulnerabilities, as noted in the April 2020 Critical Patch Update advisory:


  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions   that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high   privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of   this vulnerability can result in takeover of MySQL Server. (CVE-2021-2144)

  - Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are   affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. This difficult to exploit vulnerability allows   unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful   attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Client accessible data. (CVE-2020-2922)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are   affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged   attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this   vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of   MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. (CVE-2020-2760)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - CURL before 7.68.0 lacks proper input validation, which     allows users to create a `FILE:` URL that can make the     client access a remote file using SMB (Windows-only     issue).(CVE-2019-15601)

  - curl before version 7.51.0 uses outdated IDNA 2003     standard to handle International Domain Names and this     may lead users to potentially and unknowingly issue     network transfer requests to the wrong     host.(CVE-2016-8625)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - CURL before 7.68.0 lacks proper input validation, which     allows users to create a `FILE:` URL that can make the     client access a remote file using SMB (Windows-only     issue).(CVE-2019-15601)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - CURL before 7.68.0 lacks proper input validation, which     allows users to create a `FILE:` URL that can make the     client access a remote file using SMB (Windows-only     issue).(CVE-2019-15601)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
135701	MySQL 8.0.x < 8.0.20 Multiple Vulnerabilities (Apr 2020 CPU)	Nessus	Databases	high
137468	EulerOS 2.0 SP2 : curl (EulerOS-SA-2020-1626)	Nessus	Huawei Local Security Checks	critical
135941	FreeBSD : MySQL Server -- Multiple vulerabilities (21d59ea3-8559-11ea-a5e2-d4c9ef517024)	Nessus	FreeBSD Local Security Checks	critical
135700	MySQL 5.7.x < 5.7.30 Multiple Vulnerabilities (Jan 2020 CPU)	Nessus	Databases	high
135505	EulerOS 2.0 SP3 : curl (EulerOS-SA-2020-1376)	Nessus	Huawei Local Security Checks	high
135132	EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2020-1345)	Nessus	Huawei Local Security Checks	high
133978	EulerOS 2.0 SP8 : curl (EulerOS-SA-2020-1144)	Nessus	Huawei Local Security Checks	high

CVE-2019-15601

No Score

Tenable Plugins

high

critical

critical

high

high

high

high