The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5684 advisory.

  - mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)

  - mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)

  - mariadb: segmentation fault via the component sub_select (CVE-2022-32084)

  - mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)

  - mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)

  - mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)

  - mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

  - mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : galera and mariadb (RHSA-2023:5684)

high Nessus Plugin ID 182988

Version 1.2

Version 1.1

Version 1.0

Version 1.0

Version 1.2 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202404281425
Version 1.1 Jan 26, 2024, 11:18 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401262318
Version 1.0 Jan 26, 2024, 9:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401262100
Version 1.0 Oct 13, 2023, 6:12 AM New Plugin Feed: 202310130612