The version of MySQL running on the remote host is 5.6.x prior to 5.6.37. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the Memcached component     that allows an unauthenticated, remote attacker to     impact integrity and availability. (CVE-2017-3633)

  - Multiple unspecified flaws exist in the DML component     that allow an authenticated, remote attacker to cause a     denial of service condition. (CVE-2017-3634,     CVE-2017-3641)

  - An unspecified flaw exists in the Connector/C and C API     components that allow an authenticated, remote attacker     to cause a denial of service condition. (CVE-2017-3635)

  - An unspecified flaw exists in the Client programs     component that allows a local attacker to impact     confidentiality, integrity, and availability.
    (CVE-2017-3636)

  - Multiple unspecified flaws exist in the Replication     component that allow an authenticated, remote attacker     to cause a denial of service condition. (CVE-2017-3647,     CVE-2017-3649)

  - An unspecified flaw exists in the Charsets component     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2017-3648)

  - An unspecified flaw exists in the Client mysqldump     component that allows an authenticated, remote attacker     to impact integrity. (CVE-2017-3651)

  - Multiple unspecified flaws exist in the DDL component     that allow an authenticated, remote attacker to impact     confidentiality and integrity. (CVE-2017-3652,     CVE-2017-3653)

  - An unspecified flaw exists in the OpenSSL Encryption     component that allows an unauthenticated, remote     attacker to cause a denial of service condition.
    (CVE-2017-3731)

  - An unspecified flaw exists in the Optimizer component     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2017-10279)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MySQL 5.6.x < 5.6.37 Multiple Vulnerabilities (July 2017 CPU) (October 2017 CPU)

medium Nessus Plugin ID 101820

Version 1.11