According to the versions of the mariadb packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The mariadb-libs package provides the essential shared     libraries for any MariaDB/MySQL client program or     interface. You will need to install this package to use     any other MariaDB package or any clients that need to     connect to a MariaDB/MySQL server. MariaDB is a     community developed branch of MySQL.Security     Fix(es):Vulnerability in the MySQL Client product of     Oracle MySQL (component: C API). Supported versions     that are affected are 5.6.46 and prior, 5.7.28 and     prior and 8.0.18 and prior. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise     MySQL Client. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of MySQL     Client. (CVE-2020-2574)Vulnerability in the MySQL     Server product of Oracle MySQL (component: Server:
    Optimizer). Supported versions that are affected are     5.6.45 and prior, 5.7.27 and prior and 8.0.17 and     prior. Easily exploitable vulnerability allows low     privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS     3.0 Base Score 6.5 (Availability impacts).
    (CVE-2019-2974)Vulnerability in the MySQL Server     component of Oracle MySQL (subcomponent: Server:
    Optimizer). Supported versions that are affected are     5.6.42 and prior, 5.7.24 and prior and 8.0.13 and     prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS     3.0 Base Score 4.9 (Availability impacts).
    (CVE-2019-2481)Vulnerability in the MySQL Server     component of Oracle MySQL (subcomponent: Server:
    Parser). Supported versions that are affected are     5.6.42 and prior, 5.7.24 and prior and 8.0.13 and     prior. Easily exploitable vulnerability allows low     privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS     3.0 Base Score 6.5 (Availability impacts).
    (CVE-2019-2455)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

EulerOS Virtualization for ARM 64 3.0.2.0 : mariadb (EulerOS-SA-2021-1055)

medium Nessus Plugin ID 144721

No changelogs found