The version of MariaDB installed on the remote host is prior to 5.5.40. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-5540-release-notes advisory.

  - Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote     attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL,     a different vulnerability than CVE-2014-6491. (CVE-2014-6500)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote     attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL,     a different vulnerability than CVE-2014-6500. (CVE-2014-6491)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote     authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.
    (CVE-2014-6464)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote     authenticated users to affect availability via vectors related to SERVER:OPTIMIZER. (CVE-2014-6469)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote     attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than     CVE-2014-6496. (CVE-2014-6494)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MariaDB 5.5.0 < 5.5.40 Multiple Vulnerabilities

critical Nessus Plugin ID 167895

Version 1.3

Version 1.2

Version 1.3 Jun 24, 2025, 7:23 AM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202506240723
Version 1.2 Nov 18, 2022, 9:50 PM New Plugin Feed: 202211182150