RockyLinux 9 : mysql:8.4 (RLSA-2026:99741)

medium Nessus Plugin ID 380168

Synopsis

The remote RockyLinux host is missing one or more security updates.

Description

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:99741 advisory.

* mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)

* mysql: mysql: unauthorized server takeover (CVE-2026-101772)

* mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101724)

* mysql: mysql: Denial of Service via client programs (CVE-2026-101754)

* mysql: mysql: System takeover via client programs (CVE-2026-101770)

* mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101732)

* mysql: mysql: Denial of Service via server optimizer flaw (CVE-2026-101623)

* mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)

* mysql: mysql: Denial of Service via the audit component (CVE-2026-101748)

* mysql: mysql: Denial of Service in InnoDB (CVE-2026-101747)

* mysql: mysql: Denial of Service in InnoDB (CVE-2026-101617)

* mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)

* mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)

* mysql: mysql: Denial of Service (CVE-2026-101778)

* mysql: MySQL Server: Denial of service in the Server Optimizer (CVE-2026-101731)

* mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)

* mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)

* mysql: mysql: Denial of service in InnoDB (CVE-2026-101760)

* mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)

* mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101610)

* mysql: mysql: Denial of Service via the C API (CVE-2026-101726)

* mysql: mysql: unauthorized data modification via XML component (CVE-2026-101803)

* mysql: mysql: Denial of Service in Group Replication (CVE-2026-101751)

* mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)

* mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)

* mysql: mysql: Denial of Service in InnoDB (CVE-2026-101622)

* mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)

* mysql: mysql: Denial of service in replication component (CVE-2026-101766)

* mysql: mysql: Denial of Service in Clone Plugin (CVE-2026-101750)

* mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)

* mysql: mysql: Denial of Service via the Server Replication component (CVE-2026-101729)

* mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)

* mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)

* mysql: mysql: Denial of Service in InnoDB (CVE-2026-101611)

* mysql: mysql: unauthorized data access via improper privilege controls (CVE-2026-101800)

* mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)

* mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)

* mysql: mysql: Denial of service in InnoDB (CVE-2026-101615)

* mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)

* mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101627)

* mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101730)

* mysql: mysql: Denial of Service via JSON component (CVE-2026-101733)

* mysql: mysql: Denial of Service via the C API component (CVE-2026-101725)

* mysql: mysql: Denial of Service via security encryption component (CVE-2026-101761)

* mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)

* mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)

* mysql: mysql: Denial of Service in Server Components Services (CVE-2026-101721)

* mysql: mysql: Denial of service via DDL component (CVE-2026-101613)

* mysql: mysql: Denial of Service via multiple protocols (CVE-2026-101679)

* mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)

* mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)

* mysql: mysql: Denial of Service via XML component flaw (CVE-2026-101794)

* mysql: mysql: Denial of Service in Pluggable Auth (CVE-2026-101728)

* mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101801)

* mysql: MySQL: Denial of Service via JSON component (CVE-2026-101616)

* mysql: mysql: complete service takeover via network access (CVE-2026-101771)

* mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101612)

* mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101614)

* mysql: mysql: Complete service compromise by a local privileged attacker (CVE-2026-101795)

* mysql: mysql: Server takeover via Group Replication GCS (CVE-2026-101781)

* mysql: mysql: Denial of Service in the server optimizer (CVE-2026-101798)

* mysql: mysql: Denial of service via InnoDB storage engine (CVE-2026-101624)

* mysql: mysql: Denial of service via Pluggable Authentication component (CVE-2026-101774)

* mysql: MySQL: Unauthorized data modification in JSON component (CVE-2026-101785)

* mysql: mysql: Denial of service in query optimizer (CVE-2026-101784)

* rapidjson: rapidjson: Denial of Service via out-of-bounds read in regex parser (CVE-2026-116620)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 380168

File Name: rocky_linux_RLSA-2026-99741.nasl

Version: 1.1

Type: Local

Family: Rocky Linux Local Security Checks

Published: 11/13/2026

Updated: 11/13/2026

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.57

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2026-116620

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2026-101781

CVSS v4

Risk Factor: Medium

Base Score: 6.9

Threat Score: 2.7

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/o:rocky:linux:9, p-cpe:/a:rocky:linux:mecab-debuginfo, p-cpe:/a:rocky:linux:mecab-debugsource, p-cpe:/a:rocky:linux:mecab-devel, p-cpe:/a:rocky:linux:mecab-ipadic-eucjp, p-cpe:/a:rocky:linux:mecab-ipadic, p-cpe:/a:rocky:linux:mecab, p-cpe:/a:rocky:linux:perl-dbd-mysql-debuginfo, p-cpe:/a:rocky:linux:perl-dbd-mysql-debugsource, p-cpe:/a:rocky:linux:perl-dbd-mysql

Required KB Items: Host/local_checks_enabled, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/cpu

Exploit Ease: No known exploits are available

Patch Publication Date: 11/13/2026

Vulnerability Publication Date: 10/20/2026

Reference Information

CVE: CVE-2026-101607, CVE-2026-101608, CVE-2026-101609, CVE-2026-101610, CVE-2026-101611, CVE-2026-101612, CVE-2026-101613, CVE-2026-101614, CVE-2026-101615, CVE-2026-101616, CVE-2026-101617, CVE-2026-101618, CVE-2026-101619, CVE-2026-101621, CVE-2026-101622, CVE-2026-101623, CVE-2026-101624, CVE-2026-101627, CVE-2026-101679, CVE-2026-101721, CVE-2026-101724, CVE-2026-101725, CVE-2026-101726, CVE-2026-101727, CVE-2026-101728, CVE-2026-101729, CVE-2026-101730, CVE-2026-101731, CVE-2026-101732, CVE-2026-101733, CVE-2026-101747, CVE-2026-101748, CVE-2026-101750, CVE-2026-101751, CVE-2026-101754, CVE-2026-101760, CVE-2026-101761, CVE-2026-101762, CVE-2026-101766, CVE-2026-101770, CVE-2026-101771, CVE-2026-101772, CVE-2026-101773, CVE-2026-101774, CVE-2026-101775, CVE-2026-101776, CVE-2026-101778, CVE-2026-101779, CVE-2026-101780, CVE-2026-101781, CVE-2026-101784, CVE-2026-101785, CVE-2026-101787, CVE-2026-101788, CVE-2026-101789, CVE-2026-101794, CVE-2026-101795, CVE-2026-101796, CVE-2026-101797, CVE-2026-101798, CVE-2026-101799, CVE-2026-101800, CVE-2026-101801, CVE-2026-101802, CVE-2026-101803, CVE-2026-116620

Detections

Analytics