The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported     versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to     exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to     compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2018-2761)

Note that Nessus relies on the presence of the package as reported by the vendor.

MariaDB was updated to 10.0.35 (bsc#1090518)

Notable changes :

PCRE updated to 8.42

XtraDB updated to 5.6.39-83.1

TokuDB updated to 5.6.39-83.1

InnoDB updated to 5.6.40

The embedded server library now supports SSL when connecting to remote servers [bsc#1088681], [CVE-2018-2767]

MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE

MDEV-14988 - innodb_read_only tries to modify files if transactions were recovered in COMMITTED state

MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT index

MDEV-15723 - Crash in INFORMATION_SCHEMA.INNODB_SYS_TABLES when accessing corrupted record

fixes for the following security vulnerabilities: CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766, CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761, CVE-2018-2781, CVE-2018-2771, CVE-2018-2813

Release notes and changelog :

    - https://kb.askmonty.org/en/mariadb-10035-release-notes

    - https://kb.askmonty.org/en/mariadb-10035-changelog

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of MySQL running on the remote host is 5.6.x prior to 5.6.40. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

The version of MySQL running on the remote host is 5.7.x prior to 5.7.22. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

The version of MySQL running on the remote host is 5.5.x prior to 5.5.60. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

ID	Name	Product	Family	Published	Updated	Severity
222624	Linux Distros Unpatched Vulnerability : CVE-2018-2761	Nessus	Misc.	3/4/2025	8/20/2025	medium
118270	SUSE SLES12 Security Update : mariadb (SUSE-SU-2018:1781-2)	Nessus	SuSE Local Security Checks	10/22/2018	7/30/2024	high
700621	MySQL 5.6.x < 5.6.40 Multiple Vulnerabilities (April 2018 CPU)	Nessus Network Monitor	Database	4/25/2019	4/25/2019	high
700626	MySQL 5.7.x < 5.7.22 Multiple Vulnerabilities (April 2018 CPU)	Nessus Network Monitor	Database	4/25/2019	4/25/2019	high
700615	MySQL 5.5.x < 5.5.60 Multiple Vulnerabilities (April 2018 CPU)	Nessus Network Monitor	Database	4/25/2019	4/25/2019	high

Detections

Analytics

Plugins Search

medium

high

high

high

high