LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."

The version of MySQL running on the remote host is 5.7.x prior to 5.7.35. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the July 2021 Critical Patch Update advisory:

  - curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being   used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate   circumstances to potentially reach remote code execution in the client. (CVE-2021-22901)

  - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting   applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.)   (CVE-2019-17543)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected   are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with   network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result   in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
  (CVE-2021-2372)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL running on the remote host is 8.0.x prior to 8.0.26. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the July 2021 Critical Patch Update advisory:

  - curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being   used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate   circumstances to potentially reach remote code execution in the client. (CVE-2021-22901)

  - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting   applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.)   (CVE-2019-17543)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected   are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with   network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result   in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
  (CVE-2021-2372)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Oracle reports :

This Critical Patch Update contains 41 new security patches for Oracle MySQL. 10 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials. The highest CVSS v3.1 Base Score of vulnerabilities affecting Oracle MySQL is 8.8.

MariaDB is affected by CVE-2021-2372 and CVE-2021-2389 only.

According to the version of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - LZ4 before 1.9.2 has a heap-based buffer overflow in     LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with     a large input. (This issue can also lead to data     corruption.) NOTE: the vendor states 'only a few     specific / uncommon usages of the API are at     risk.'(CVE-2019-17543)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - LZ4 before 1.9.2 has a heap-based buffer overflow in     LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with     a large input. (This issue can also lead to data     corruption.)(CVE-2019-17543)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the lz4 package has been released.

According to the version of the lz4 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - LZ4 before 1.9.2 has a heap-based buffer overflow in     LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with     a large input. (This issue can also lead to data     corruption.)(CVE-2019-17543)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lz4 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - LZ4 before 1.9.2 has a heap-based buffer overflow in     LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with     a large input. (This issue can also lead to data     corruption.)(CVE-2019-17543)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - LZ4 before 1.9.2 has a heap-based buffer overflow in     LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with     a large input. (This issue can also lead to data     corruption.) NOTE: the vendor states 'only a few     specific / uncommon usages of the API are at     risk.'(CVE-2019-17543)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lz4 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - LZ4 before 1.9.2 has a heap-based buffer overflow in     LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with     a large input. (This issue can also lead to data     corruption.) NOTE: the vendor states 'only a few     specific / uncommon usages of the API are at     risk.'(CVE-2019-17543)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for lz4 fixes the following issues :

  - CVE-2019-17543: Fixed a heap-based buffer overflow in     LZ4_write32 (bsc#1153936).

This update was imported from the SUSE:SLE-15:Update update project.

This update for lz4 fixes the following issues :

CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
151969	MySQL 5.7.x < 5.7.35 Multiple Vulnerabilities (Jul 2021 CPU)	Nessus	Databases	high
151968	MySQL 8.0.x < 8.0.26 Multiple Vulnerabilities (Jul 2021 CPU)	Nessus	Databases	high
151899	FreeBSD : MySQL -- Multiple vulnerabilities (38a4a043-e937-11eb-9b84-d4c9ef517024)	Nessus	FreeBSD Local Security Checks	high
141752	EulerOS Virtualization 3.0.2.2 : lz4 (EulerOS-SA-2020-2191)	Nessus	Huawei Local Security Checks	high
137990	EulerOS Virtualization 3.0.6.0 : lz4 (EulerOS-SA-2020-1771)	Nessus	Huawei Local Security Checks	high
136332	Photon OS 2.0: Lz4 PHSA-2020-2.0-0235	Nessus	PhotonOS Local Security Checks	high
136094	Photon OS 3.0: Lz4 PHSA-2020-3.0-0083	Nessus	PhotonOS Local Security Checks	high
134551	EulerOS Virtualization for ARM 64 3.0.2.0 : lz4 (EulerOS-SA-2020-1262)	Nessus	Huawei Local Security Checks	high
132811	EulerOS Virtualization for ARM 64 3.0.5.0 : lz4 (EulerOS-SA-2020-1057)	Nessus	Huawei Local Security Checks	high
132165	EulerOS 2.0 SP3 : lz4 (EulerOS-SA-2019-2630)	Nessus	Huawei Local Security Checks	high
131852	EulerOS 2.0 SP2 : lz4 (EulerOS-SA-2019-2360)	Nessus	Huawei Local Security Checks	high
131816	EulerOS 2.0 SP5 : lz4 (EulerOS-SA-2019-2542)	Nessus	Huawei Local Security Checks	high
131357	EulerOS 2.0 SP8 : lz4 (EulerOS-SA-2019-2291)	Nessus	Huawei Local Security Checks	high
130360	openSUSE Security Update : lz4 (openSUSE-2019-2399)	Nessus	SuSE Local Security Checks	high
130359	openSUSE Security Update : lz4 (openSUSE-2019-2398)	Nessus	SuSE Local Security Checks	high
130199	SUSE SLED15 / SLES15 Security Update : lz4 (SUSE-SU-2019:2757-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-17543

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high