The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1010 advisory.

  - mysql: Server: DML unspecified vulnerability (CPU Apr 2021) (CVE-2021-2154, CVE-2021-2166)

  - mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2372, CVE-2021-2389)

  - mysql: InnoDB unspecified vulnerability (CPU Oct 2021) (CVE-2021-35604)

  - mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref (CVE-2021-46657)

  - mariadb: save_window_function_values triggers an abort during IN subquery (CVE-2021-46658)

  - mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries (CVE-2021-46662)

  - mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause (CVE-2021-46666)

  - mariadb: Integer overflow in sql_lex.cc integer leading to crash (CVE-2021-46667)

  - mysql: InnoDB unspecified vulnerability (CPU Apr 2022) (CVE-2022-21451)

  - mariadb: crash in Used_tables_and_const_cache::used_tables_and_const_cache_join (CVE-2022-27385)

  - mariadb: improper locking due to unreleased lock in the ds_xbstream.cc (CVE-2022-31621)

  - mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c     (CVE-2022-31624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : rh-mariadb103-mariadb (RHSA-2022:1010)

medium Nessus Plugin ID 159167

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.10 Nov 3, 2023, 1:41 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202311031341
Version 1.9 Nov 2, 2023, 4:31 AM IAVM reference Plugin Feed: 202311020431
Version 1.8 May 25, 2023, 3:03 PM Logic Changes (Added support for ppc64le architecture) Plugin Feed: 202305251503
Version 1.7 Jan 23, 2023, 9:47 PM Logic Changes (Added support for repository relative URLs) Plugin Feed: 202301232147
Version 1.6 Dec 6, 2022, 2:54 AM Reference Plugin Feed: 202212060254