Detections
Analytics

RHEL 6 / 7 : rh-mysql56-mysql (RHSA-2017:3265)

medium Nessus Plugin ID 194052

Language:

Synopsis

The remote Red Hat host is missing one or more security updates for rh-mysql56-mysql.

Description

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3265 advisory.

 - mysql: Server: Pluggable Auth unspecified vulnerability (CPU Oct 2017) (CVE-2017-10155)

 - mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017) (CVE-2017-10227, CVE-2017-10279, CVE-2017-10294, CVE-2017-10378)

 - mysql: Server: Replication unspecified vulnerability (CPU Oct 2017) (CVE-2017-10268)

 - mysql: Server: FTS unspecified vulnerability (CPU Oct 2017) (CVE-2017-10276)

 - mysql: Server: Performance Schema unspecified vulnerability (CPU Oct 2017) (CVE-2017-10283)

 - mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017) (CVE-2017-10286)

 - mysql: Server: Memcached unspecified vulnerability (CPU Oct 2017) (CVE-2017-10314)

 - mysql: Client programs unspecified vulnerability (CPU Oct 2017) (CVE-2017-10379)

 - mysql: Server: DDL unspecified vulnerability (CPU Oct 2017) (CVE-2017-10384)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the RHEL rh-mysql56-mysql package based on the guidance in RHSA-2017:3265.

See Also

https://access.redhat.com/security/updates/classification/#important

http://www.nessus.org/u?6b8727c4

https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html

https://bugzilla.redhat.com/show_bug.cgi?id=1503649

https://bugzilla.redhat.com/show_bug.cgi?id=1503654

https://bugzilla.redhat.com/show_bug.cgi?id=1503656

https://bugzilla.redhat.com/show_bug.cgi?id=1503659

https://bugzilla.redhat.com/show_bug.cgi?id=1503663

https://bugzilla.redhat.com/show_bug.cgi?id=1503664

https://bugzilla.redhat.com/show_bug.cgi?id=1503669

https://bugzilla.redhat.com/show_bug.cgi?id=1503671

https://bugzilla.redhat.com/show_bug.cgi?id=1503679

https://bugzilla.redhat.com/show_bug.cgi?id=1503684

https://bugzilla.redhat.com/show_bug.cgi?id=1503685

https://bugzilla.redhat.com/show_bug.cgi?id=1503686

http://www.nessus.org/u?182b7797

https://access.redhat.com/errata/RHSA-2017:3265

Plugin Details

Severity: Medium

ID: 194052

File Name: redhat-RHSA-2017-3265.nasl

Version: 1.0

Type: local

Agent: unix

Published: 4/27/2024

Updated: 4/27/2024

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 4

Temporal Score: 3

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS Score Source: CVE-2017-10379

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:redhat:enterprise_linux:6, cpe:/o:redhat:enterprise_linux:7, p-cpe:/a:redhat:enterprise_linux:rh-mysql56-mysql, p-cpe:/a:redhat:enterprise_linux:rh-mysql56-mysql-bench, p-cpe:/a:redhat:enterprise_linux:rh-mysql56-mysql-common, p-cpe:/a:redhat:enterprise_linux:rh-mysql56-mysql-config, p-cpe:/a:redhat:enterprise_linux:rh-mysql56-mysql-devel, p-cpe:/a:redhat:enterprise_linux:rh-mysql56-mysql-errmsg, p-cpe:/a:redhat:enterprise_linux:rh-mysql56-mysql-server, p-cpe:/a:redhat:enterprise_linux:rh-mysql56-mysql-test

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Ease: No known exploits are available

Patch Publication Date: 11/27/2017

Vulnerability Publication Date: 10/17/2017

Reference Information

CVE: CVE-2017-10155, CVE-2017-10227, CVE-2017-10268, CVE-2017-10276, CVE-2017-10279, CVE-2017-10283, CVE-2017-10286, CVE-2017-10294, CVE-2017-10314, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384

RHSA: 2017:3265