MariaDB 10.1 < 10.1.31 Multiple Vulnerabilities

High Nessus Plugin ID 121422

Synopsis

The remote database server is affected by multiple vulnerabilities

Description

The version of MariaDB running of remote host is 10.1 prior to 10.1.31. It is, therefore, affected by multiple vulnerabilities

Solution

Upgrade to MariaDB version 10.1.31 or later.

See Also

https://lists.askmonty.org/cgi-bin/mailman/listinfo/announce

https://mariadb.com/kb/en/mdb-10131-rn

http://cve.mitre.org/cgi/bin/cvename.cgi?name=CVE-2018-2562

http://cve.mitre.org/cgi/bin/cvename.cgi?name=CVE-2018-2612

http://cve.mitre.org/cgi/bin/cvename.cgi?name=CVE-2018-2622

http://cve.mitre.org/cgi/bin/cvename.cgi?name=CVE-2018-2640

http://cve.mitre.org/cgi/bin/cvename.cgi?name=CVE-2018-2665

http://cve.mitre.org/cgi/bin/cvename.cgi?name=CVE-2018-2668

http://cve.mitre.org/cgi/bin/cvename.cgi?name=CVE-2018-3133

http://www.nessus.org/u?9e7fe54c

https://jira.mariadb.org/browse/MDEV-13205

https://jira.mariadb.org/browse/MDEV-13499

https://jira.mariadb.org/browse/MDEV-14174

https://jira.mariadb.org/browse/MDEV-14776

https://jira.mariadb.org/browse/MDEV-14799

https://jira.mariadb.org/browse/MDEV-14874

https://jira.mariadb.org/browse/MDEV-7049

Plugin Details

Severity: High

ID: 121422

File Name: mariadb_10_1_31.nasl

Version: 1.2

Type: remote

Family: Databases

Published: 2019/01/28

Updated: 2019/10/31

Dependencies: 10719, 91823

Risk Information

Risk Factor: High

CVSS Score Source: CVE-2018-2612

CVSS v2.0

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSS v3.0

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:mariadb:mariadb

Exploit Ease: No known exploits are available

Patch Publication Date: 2018/02/06

Vulnerability Publication Date: 2018/01/17

Reference Information

CVE: CVE-2018-2562, CVE-2018-2612, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-3133

BID: 102678, 102681, 102682, 102706, 102709, 102713, 105610