The version of MariaDB installed on the remote host is prior to 10.1.18. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-10118-release-notes advisory.

  - Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before     8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before     5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before     5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain     permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.
    (CVE-2016-6663)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a     reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of     this candidate. All references and descriptions in this candidate have been removed to prevent accidental     usage (CVE-2016-5616)

  - Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier     allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
    (CVE-2016-3492)

  - Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect     availability via vectors related to DML. (CVE-2016-5624)

  - Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier     allows remote authenticated users to affect availability via vectors related to GIS. (CVE-2016-5626)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MariaDB 10.1.0 < 10.1.18 Multiple Vulnerabilities

high Nessus Plugin ID 95632

Version 1.14