The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5500 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera     (25.3.31). (BZ#1899082, BZ#1899086)

    Security Fix(es):

    * mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

    * mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

    * mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

    * mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

    * mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

    * mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * FTBFS: -D_GLIBCXX_ASSERTIONS (BZ#1899009)

    * Queries with entity_id IN ('1', '2', , '70000') run much slower in MariaDB 10.3 than on MariaDB 10.1     (BZ#1899017)

    * Cleanup race with wsrep_rsync_sst_tunnel may prevent full galera cluster bootstrap (BZ#1899021)

    * There are undeclared file conflicts in several mariadb and mysql packages (BZ#1899077)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5246 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is     binary-compatible with MySQL.

    The following packages have been upgraded to a later upstream version: rh-mariadb103-mariadb (10.3.27),     rh-mariadb103-galera (25.3.31). (BZ#1894122, BZ#1894124)

    Security Fix(es):

    * mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

    * mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)

    * mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)

    * mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)

    * mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)

    * mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

    * mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

    * mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

    * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2922)

    * mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

    * mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

    * mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

    * mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * mysqld_safe --dry-run doesn't work as expected (BZ#1894105)

    Enhancement(s):

    * [RFE] create separate package providing ha_connect.so plugin for mariadb-server in SCL (BZ#1894114)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 10.4.16. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.4.16 advisory.

  - With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible     for an unprivileged user with an ability to run code on the server machine to intercept the named pipe     connection and act as a man-in-the-middle, gaining access to all the data passed between the client and     the server, and getting the ability to run SQL commands on behalf of the connected user. This occurs     because of an incorrect security descriptor. This affects MariaDB Server before 10.1.48, 10.2.x before     10.2.35, 10.3.x before 10.3.26, 10.4.x before 10.4.16, and 10.5.x before 10.5.7. NOTE: this issue exists     because certain details of the MariaDB CVE-2019-2503 fix did not comprehensively address attack variants     against MariaDB. This situation is specific to MariaDB, and thus CVE-2020-28912 does NOT apply to other     vendors that were originally affected by CVE-2019-2503. (CVE-2020-28912)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions     that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2020-14765)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2020-14776)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions     that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2020-14789)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions     that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable     vulnerability allows high privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2020-14812)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
144418	RHEL 8 : mariadb:10.3 (RHSA-2020:5500)	Nessus	Red Hat Local Security Checks	12/18/2020	11/7/2024	critical
170298	RHEL 7 : rh-mariadb103-mariadb and rh-mariadb103-galera (RHSA-2020:5246)	Nessus	Red Hat Local Security Checks	1/23/2023	11/7/2024	critical
142217	MariaDB 10.4.0 < 10.4.16 Multiple Vulnerabilities	Nessus	Databases	11/2/2020	1/29/2026	high

Detections

Analytics

Plugins Search

critical

critical

high