The version of MySQL running on the remote host is 5.6.x prior to 5.6.33. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the InnoDB subcomponent     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-5507)

  - A flaw exists in the check_log_path() function within     file sql/sys_vars.cc due to inadequate restrictions on     the ability to write to the my.cnf configuration file     and allowing the loading of configuration files from     path locations not used by current versions. An     authenticated, remote attacker can exploit this issue     by using specially crafted queries that utilize logging     functionality to create new files or append custom     content to existing files. This allows the attacker to     gain root privileges by inserting a custom .cnf file     with a 'malloc_lib=' directive pointing to specially     crafted mysql_hookandroot_lib.so file and thereby cause     MySQL to load a malicious library the next time it is     started. (CVE-2016-6662)

  - An unspecified flaw exists that allows an authenticated,     remote attacker to bypass restrictions and create the     /var/lib/mysql/my.cnf file with custom contents without     the FILE privilege requirement. (CVE-2016-6663)     
  - A flaw exists that is related to the use of temporary     files by REPAIR TABLE. An authenticated, remote attacker     can exploit this to gain elevated privileges.

  - A flaw exists in InnoDB when handling an operation that     dropped and created a full-text search table. An     authenticated, remote attacker can exploit this to     trigger an assertion, resulting in a denial of service     condition.

  - A flaw exists in InnoDB when accessing full-text     auxiliary tables while dropping the indexed table. An     authenticated, remote attacker can exploit this to     trigger an assertion, resulting in a denial of service     condition.

  - A buffer overflow condition exists when handling long     integer values in MEDIUMINT columns due to the improper     validation of certain input. An authenticated, remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.

  - An unspecified flaw exists due to how a prepared     statement uses a parameter in the select list of a     derived table that was part of a join. An authenticated,     remote attacker can exploit this to cause a server exit,     resulting in a denial of service condition.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 25 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-9b83c6862d advisory.

    * Mon Dec 12 2016 Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.17-1
    - Update to MySQL 5.7.17, for various fixes described at       https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html
    - Add new plugin: connnection_control.so
    - Add MySQL Group Replication: group_replication.so
    - Add numactl-devel to buildreq and enable NUMA support (if available)
    - Simplify boost path
    - Build compat-openssl10 in rawhide for now
    - Reqs. in -devel packages was incomplete


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL running on the remote host is 5.6.x prior to 5.6.33. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the InnoDB subcomponent     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-5507)

  - A flaw exists in the check_log_path() function within     file sql/sys_vars.cc due to inadequate restrictions on     the ability to write to the my.cnf configuration file     and allowing the loading of configuration files from     path locations not used by current versions. An     authenticated, remote attacker can exploit this issue     by using specially crafted queries that utilize logging     functionality to create new files or append custom     content to existing files. This allows the attacker to     gain root privileges by inserting a custom .cnf file     with a 'malloc_lib=' directive pointing to specially     crafted mysql_hookandroot_lib.so file and thereby cause     MySQL to load a malicious library the next time it is     started. (CVE-2016-6662)

  - An unspecified flaw exists that allows an authenticated,     remote attacker to bypass restrictions and create the     /var/lib/mysql/my.cnf file with custom contents without     the FILE privilege requirement. (CVE-2016-6663)

  - A flaw exists that is related to the use of temporary     files by REPAIR TABLE. An authenticated, remote attacker     can exploit this to gain elevated privileges.

  - A flaw exists in InnoDB when handling an operation that     dropped and created a full-text search table. An     authenticated, remote attacker can exploit this to     trigger an assertion, resulting in a denial of service     condition.

  - A flaw exists in InnoDB when accessing full-text     auxiliary tables while dropping the indexed table. An     authenticated, remote attacker can exploit this to     trigger an assertion, resulting in a denial of service     condition.

  - A buffer overflow condition exists when handling long     integer values in MEDIUMINT columns due to the improper     validation of certain input. An authenticated, remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.

  - An unspecified flaw exists due to how a prepared     statement uses a parameter in the select list of a     derived table that was part of a join. An authenticated,     remote attacker can exploit this to cause a server exit,     resulting in a denial of service condition.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL running on the remote host is 5.7.x prior to 5.7.15. It is, therefore, affected by multiple vulnerabilities :

  - Multiple unspecified flaws exist in the Optimizer     subcomponent that allow an authenticated, remote     attacker to cause a denial of service condition.
    (CVE-2016-3492, CVE-2016-5632)

  - An unspecified flaw exists in the InnoDB subcomponent     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-5507)

  - An unspecified flaw exists in the MyISAM subcomponent     that allows a local attacker to gain elevated     privileges. (CVE-2016-5616)

  - An unspecified flaw exists in the Error Handling     subcomponent that allows a local attacker to gain     elevated privileges. (CVE-2016-5617)

  - An unspecified flaw exists in the Packaging subcomponent     that allows a local attacker to gain elevated     privileges. (CVE-2016-5625)

  - An unspecified flaw exists in the GIS subcomponent that     allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-5626)

  - An unspecified flaw exists in the Federated subcomponent     that allows an authenticated, remote attacker to cause a     denial of service condition. (CVE-2016-5629)

  - A flaw exists in the check_log_path() function within     file sql/sys_vars.cc due to inadequate restrictions on     the ability to write to the my.cnf configuration file     and allowing the loading of configuration files from     path locations not used by current versions. An     authenticated, remote attacker can exploit this issue     by using specially crafted queries that utilize logging     functionality to create new files or append custom     content to existing files. This allows the attacker to     gain root privileges by inserting a custom .cnf file     with a 'malloc_lib=' directive pointing to specially     crafted mysql_hookandroot_lib.so file and thereby cause     MySQL to load a malicious library the next time it is     started. (CVE-2016-6662)

  - An unspecified flaw exists that allows an authenticated,     remote attacker to bypass restrictions and create the     /var/lib/mysql/my.cnf file with custom contents without     the FILE privilege requirement. (CVE-2016-6663)     
  - An unspecified flaw exists in the Types subcomponent     that allows an authenticated, remote attacker to cause     a denial of service condition.(CVE-2016-8283)

  - An unspecified flaw exists in the Security: Privileges     subcomponent that allows an authenticated, remote     attacker to disclose sensitive information.
    (CVE-2016-8286)

  - A flaw exists that is related to the use of temporary     files by REPAIR TABLE. An authenticated, remote attacker     can exploit this to gain elevated privileges.

  - A flaw exists in InnoDB when handling an operation that     dropped and created a full-text search table. An     authenticated, remote attacker can exploit this to     trigger an assertion, resulting in a denial of service     condition.

  - A flaw exists in InnoDB when accessing full-text     auxiliary tables while dropping the indexed table. An     authenticated, remote attacker can exploit this to     trigger an assertion, resulting in a denial of service     condition.

  - A buffer overflow condition exists when handling long     integer values in MEDIUMINT columns due to the improper     validation of certain input. An authenticated, remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.

  - An information disclosure vulnerability exists in the     validate_password plugin due to passwords that have been     rejected being written as plaintext to the error log. A     local attacker can exploit this to more easily guess     what passwords might have been chosen and accepted.

  - A flaw exists in InnoDB when handling an ALTER TABLE ...
    ENCRYPTION='Y', ALGORITHM=COPY operation that is applied     to a table in the system tablespace. An authenticated,     remote attacker can exploit this to trigger an     assertion, resulting in a denial of service condition.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201701-01 (MariaDB and MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MariaDB and MySQL.
      Please review the CVE identifiers referenced below for details.
  Impact :

    Attackers could execute arbitrary code, escalate privileges, and impact       availability via unspecified vectors.
  Workaround :

    There is no known workaround at this time.

The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-c7e60a9fd4 advisory.

    * Mon Dec 12 2016 Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.17-1
    - Update to MySQL 5.7.17, for various fixes described at       https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html
    - Add new plugin: connnection_control.so
    - Add MySQL Group Replication: group_replication.so
    - Add numactl-devel to buildreq and enable NUMA support (if available)
    - Simplify boost path
    - Build compat-openssl10 in rawhide for now
    - Reqs. in -devel packages was incomplete


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2749 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld,     and many client programs.

    The following packages have been upgraded to a newer upstream version: rh-mysql56-mysql (5.6.34).

    Security Fix(es):

    * It was discovered that the MySQL logging functionality allowed writing to MySQL configuration files. An     administrative database user, or a database user with FILE privileges, could possibly use this flaw to run     arbitrary commands with root privileges on the system running the database server. (CVE-2016-6662)

    * A race condition was found in the way MySQL performed MyISAM engine table repair. A database user with     shell access to the server running mysqld could use this flaw to change permissions of arbitrary files     writable by the mysql system user. (CVE-2016-6663, CVE-2016-5616)

    * A flaw was found in the way the mysqld_safe script handled creation of error log file. The mysql     operating system user could use this flaw to escalate their privileges to root. (CVE-2016-6664,     CVE-2016-5617)

    * This update fixes several vulnerabilities in the MySQL database server. Information about these flaws     can be found on the Oracle Critical Patch Update Advisory pages, listed in the References section.
    (CVE-2016-3492, CVE-2016-5507, CVE-2016-5626, CVE-2016-5629, CVE-2016-8283)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Unspecified vulnerability in Oracle MySQL 5.6.32 and earlier and 5.7.14 and earlier allows remote     administrators to affect availability via vectors related to Server: InnoDB. (CVE-2016-5507)

Note that Nessus relies on the presence of the package as reported by the vendor.

mysql-community-server was updated to 5.6.34 to fix the following issues :

  - Changes     http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-     34.html     http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-     33.html     http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-     32.html     http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-     31.html

  - fixed CVEs: CVE-2016-6304, CVE-2016-6662, CVE-2016-7440,     CVE-2016-5584, CVE-2016-5617, CVE-2016-5616,     CVE-2016-5626, CVE-2016-3492, CVE-2016-5629,     CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,     CVE-2016-5612, CVE-2016-5627, CVE-2016-5630,     CVE-2016-8284, CVE-2016-8288, CVE-2016-3477,     CVE-2016-2105, CVE-2016-3486, CVE-2016-3501,     CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,     CVE-2016-3459, CVE-2016-5439, CVE-2016-5440

  - fixes SUSE Bugs: [boo#999666], [boo#998309],     [boo#1005581], [boo#1005558], [boo#1005563],     [boo#1005562], [boo#1005566], [boo#1005555],     [boo#1005569], [boo#1005557], [boo#1005582],     [boo#1005560], [boo#1005561], [boo#1005567],     [boo#1005570], [boo#1005583], [boo#1005586],     [boo#989913], [boo#977614], [boo#989914], [boo#989915],     [boo#989919], [boo#989922], [boo#989921], [boo#989911],     [boo#989925], [boo#989926]

  - append '--ignore-db-dir=lost+found' to the mysqld     options in 'mysql-systemd-helper' script if 'lost+found'     directory is found in $datadir [boo#986251] 

  - remove syslog.target from *.service files [boo#983938]

  - add systemd to deps to build on leap and friends 

  - replace '%(_libexecdir)/systemd/system' with %(_unitdir)     macro

  - remove useless mysql@default.service [boo#971456]

  - replace all occurrences of the string '@sysconfdir@'     with '/etc' in     mysql-community-server-5.6.3-logrotate.patch as it     wasn't expanded properly [boo#990890]

  - remove '%define _rundir' as 13.1 is out of support scope

  - run 'usermod -g mysql mysql' only if mysql user is not     in mysql group. Run 'usermod -s /bin/false/ mysql' only     if mysql user doesn't have '/bin/false' shell set.

  - re-enable mysql profiling

The version of MySQL installed on the remote host is version 5.7.x prior to 5.7.15 and is affected by multiple issues :

 - A flaw exists related to the way 'REPAIR TABLE' uses temporary files.  This may allow an authenticated attacker to gain elevated privileges.
 - A flaw exists in InnoDB that is triggered during the handling of an operation that dropped and created a full-text search table.  This may allow an authenticated attacker to trigger an assertion and cause a denial of service.
 - A flaw exists in InnoDB that is triggered when accessing full-text search auxiliary tables while dropping the indexed table.  This may allow an authenticated attacker to trigger an assertion and cause a denial of service.
 - An overflow condition exists that is triggered as certain input is not properly validated when handling long integer values in 'MEDIUMINT' columns.  This may allow an authenticated attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.
 - A flaw exists in the 'validate_password' plugin that is triggered as rejected passwords are logged in plaintext on the error log.  This may allow a local attacker to gain access to passwords that did not meet the password policy, but may potentially be very close to the password ultimately chosen and accepted.
 - A flaw exists in InnoDB that is triggered during the handling of an 'ALTER TABLE ... ENCRYPTION=Y, ALGORITHM=COPY' operation on a table residing in the system tablespace.  This may allow an authenticated attacker to crash the server.
 - An unspecified flaw exists related to the Optimizer subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-3492)
 - An unspecified flaw exists related to the InnoDB subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-5507)
 - An unspecified flaw exists related to the MyISAM subcomponent. This may allow a local attacker to gain elevated privileges. No further details have been provided by the vendor. (CVE-2016-5616)
 - An unspecified flaw exists related to the Error Handling subcomponent. This may allow a local attacker to gain elevated privileges. No further details have been provided by the vendor. (CVE-2016-5617)
 - An unspecified flaw exists related to the Packaging subcomponent. This may allow a local attacker to gain elevated privileges. No further details have been provided by the vendor. (CVE-2016-5625)
 - An unspecified flaw exists related to the GIS subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-5626)
 - An unspecified flaw exists related to the Federated subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-5629)
 - An unspecified flaw exists related to the Optimizer subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor. (2016-5632)
 - An unspecified flaw exists related to the Types subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor. (CVE-2016-8283)
 - An unspecified flaw exists related to the Security: Privileges subcomponent. This may allow an authenticated remote attacker to disclose potentially sensitive information. No further details have been provided by the vendor. (CVE-2016-8286)

The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.33 and is affected by multiple issues :

 - A flaw exists related to the way 'REPAIR TABLE' uses temporary files.  This may allow an authenticated attacker to gain elevated privileges.
 - A flaw exists in InnoDB that is triggered during the handling of an operation that dropped and created a full-text search table. This may allow an authenticated attacker to trigger an assertion and cause a denial of service.
 - A flaw exists in InnoDB that is triggered when accessing full-text search auxiliary tables while dropping the indexed table.  This may allow an authenticated attacker to trigger an assertion and cause a denial of service.
 - An overflow condition exists that is triggered as certain input is not properly validated when handling long integer values in 'MEDIUMINT' columns.  This may allow an authenticated attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.
 - A flaw exists that is triggered during the handling of prepared statements that use a parameter in the select list of a derived table that was part of a join.  This may allow an authenticated attacker to crash the server.
 - An unspecified flaw exists related to the Error Handling subcomponent. This may allow a local attacker to gain elevated privileges. No further details have been provided by the vendor.
 - An unspecified flaw exists related to the MyISAM subcomponent. This may allow a local attacker to gain elevated privileges. No further details have been provided by the vendor.
 - An unspecified flaw exists related to the GIS subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor.
 - An unspecified flaw exists related to the Optimizer subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor.
 - An unspecified flaw exists related to the Federated subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor.
 - An unspecified flaw exists related to the InnoDB subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor.
 - An unspecified flaw exists related to the Types subcomponent. This may allow an authenticated remote attacker to cause a denial of service. No further details have been provided by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
93377	MySQL 5.6.x < 5.6.33 Multiple Vulnerabilities	Nessus	Databases	9/8/2016	11/14/2019	critical
96159	Fedora 25 : community-mysql (2016-9b83c6862d)	Nessus	Fedora Local Security Checks	12/28/2016	8/29/2025	low
93378	MySQL 5.6.x < 5.6.33 Multiple Vulnerabilities	Nessus	Databases	9/8/2016	6/3/2020	critical
93379	MySQL 5.7.x < 5.7.15 Multiple Vulnerabilities	Nessus	Databases	9/8/2016	11/14/2019	critical
96232	GLSA-201701-01 : MariaDB and MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/3/2017	1/11/2021	critical
96171	Fedora 24 : community-mysql (2016-c7e60a9fd4)	Nessus	Fedora Local Security Checks	12/29/2016	8/29/2025	low
234406	RHEL 6 / 7 : rh-mysql56-mysql (RHSA-2016:2749)	Nessus	Red Hat Local Security Checks	4/15/2025	8/29/2025	critical
252790	Linux Distros Unpatched Vulnerability : CVE-2016-5507	Nessus	Misc.	8/20/2025	8/20/2025	medium
93380	MySQL 5.7.x < 5.7.15 Multiple Vulnerabilities	Nessus	Databases	9/8/2016	6/3/2020	critical
94694	openSUSE Security Update : mysql-community-server (openSUSE-2016-1283)	Nessus	SuSE Local Security Checks	11/11/2016	1/19/2021	critical
94756	openSUSE Security Update : mysql-community-server (openSUSE-2016-1289)	Nessus	SuSE Local Security Checks	11/14/2016	1/19/2021	critical
9618	Oracle MySQL 5.7.x < 5.7.15 Multiple Vulnerabilities	Nessus Network Monitor	Database	9/30/2016	3/6/2019	high
9614	Oracle MySQL 5.6.x < 5.6.33 Multiple Vulnerabilities	Nessus Network Monitor	Database	9/30/2016	3/6/2019	high

Detections

Analytics

Plugins Search

critical

low

critical

critical

critical

low

critical

medium

critical

critical

critical

high

high