Red Hat Security Advisory

RHSA-2015:1646

rh-mariadb100-mariadb security update

Released 2015-08-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mariadb100-mariadb-1:10.0.20-1.el6, rh-mariadb100-mariadb-bench-1:10.0.20-1.el6, rh-mariadb100-mariadb-common-1:10.0.20-1.el6 +6
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mariadb100-mariadb-1:10.0.20-1.el7, rh-mariadb100-mariadb-bench-1:10.0.20-1.el7, rh-mariadb100-mariadb-common-1:10.0.20-1.el7 +6
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) rh-mariadb100-mariadb-1:10.0.20-1.el6, rh-mariadb100-mariadb-bench-1:10.0.20-1.el6, rh-mariadb100-mariadb-common-1:10.0.20-1.el6 +6
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) rh-mariadb100-mariadb-1:10.0.20-1.el6, rh-mariadb100-mariadb-bench-1:10.0.20-1.el6, rh-mariadb100-mariadb-common-1:10.0.20-1.el6 +6
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) rh-mariadb100-mariadb-1:10.0.20-1.el7, rh-mariadb100-mariadb-bench-1:10.0.20-1.el7, rh-mariadb100-mariadb-common-1:10.0.20-1.el7 +6
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mariadb100-mariadb-1:10.0.20-1.el6, rh-mariadb100-mariadb-bench-1:10.0.20-1.el6, rh-mariadb100-mariadb-common-1:10.0.20-1.el6 +6
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mariadb100-mariadb-1:10.0.20-1.el7, rh-mariadb100-mariadb-bench-1:10.0.20-1.el7, rh-mariadb100-mariadb-common-1:10.0.20-1.el7 +6

Fixes 25 records

TI-2015-00462 CVE-2015-0501 · GHSA-7m5h-2c3p-4m2w

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and…

LOW 38

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling.

CVSS 2.0MEDIUM 5.7 Network Low privileges Interaction — EPSS 0.10263 Published 2015-04-16 Partial fix

TI-2015-02785 CVE-2015-3152 · GHSA-p7qr-v5jx-7qv3

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3…

LOW 36

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof server…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.07141 Published 2016-05-16 Partial fix CWE-295

TI-2015-02305 CVE-2015-2617 · GHSA-2wmh-359c-rw99

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 34

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Partition.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03064 Published 2015-07-16 Fixed

TI-2015-02308 CVE-2015-2620 · GHSA-w97j-x2ff-rr4p

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and…

LOW 28

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0472 Published 2015-07-16 Partial fix

TI-2015-03979 CVE-2015-4757 · GHSA-vx7r-p6jx-hf82

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and…

LOW 27

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.06915 Published 2015-07-16 Partial fix

TI-2015-02259 CVE-2015-2571 · GHSA-4fvx-6pv8-2rxh

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and…

LOW 27

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.05323 Published 2015-04-16 Partial fix

TI-2015-03974 CVE-2015-4752 · GHSA-j985-v78q-pcwf

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to Server : I_S.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04083 Published 2015-07-16 Partial fix

TI-2015-02336 CVE-2015-2648 · GHSA-qc49-rpfg-7h6m

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04333 Published 2015-07-16 Partial fix

TI-2015-02331 CVE-2015-2643 · GHSA-mhfw-jv7r-2344

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04333 Published 2015-07-16 Partial fix

TI-2015-02270 CVE-2015-2582 · GHSA-fw8r-p4q8-w66f

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04333 Published 2015-07-16 Partial fix

TI-2015-00466 CVE-2015-0505 · GHSA-qmpq-vv9h-qcm9

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and…

LOW 25

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0519 Published 2015-04-16 Partial fix

TI-2015-00460 CVE-2015-0499 · GHSA-h9f2-jxcx-f5wh

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and…

LOW 25

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.04892 Published 2015-04-16 Partial fix

TI-2015-03994 CVE-2015-4772 · GHSA-fgrv-fgcx-mm52

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03107 Published 2015-07-16 Fixed

TI-2015-03978 CVE-2015-4756 · GHSA-mc23-6jmw-p76x

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0439.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03023 Published 2015-07-16 Fixed

TI-2015-02299 CVE-2015-2611 · GHSA-v38g-3jw9-pv2j

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03086 Published 2015-07-16 Fixed

TI-2015-04084 CVE-2015-4866 · GHSA-9727-72fp-3c79

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote…

LOW 23

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02387 Published 2015-10-21 Fixed

TI-2015-03959 CVE-2015-4737 · GHSA-rc67-r6fc-3mxg

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and…

LOW 23

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0362 Published 2015-07-16 Partial fix

TI-2015-03993 CVE-2015-4771 · GHSA-h865-g436-7cf6

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to RBR.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02604 Published 2015-07-16 Fixed

TI-2015-03991 CVE-2015-4769 · GHSA-5h69-v8fc-cwrm

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Firewall, a different vulnerability than CVE…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02604 Published 2015-07-16 Fixed

TI-2015-03983 CVE-2015-4761 · GHSA-qffc-rj73-gmmj

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02545 Published 2015-07-16 Fixed

TI-2015-02329 CVE-2015-2641 · GHSA-xpfv-r9w9-w48r

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02587 Published 2015-07-16 Fixed

TI-2015-04082 CVE-2015-4864 · GHSA-78fj-8qvw-m3wg

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 21

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02388 Published 2015-10-21 Partial fix

TI-2015-02327 CVE-2015-2639 · GHSA-w2qj-ff27-7rv3

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 21

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Firewall.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02387 Published 2015-07-16 Fixed

TI-2015-03989 CVE-2015-4767 · GHSA-pfm3-rvf7-h49f

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 15

CVSS 2.0LOW 1.7 Network Low privileges Interaction — EPSS 0.02806 Published 2015-07-16 Fixed

TI-2015-02349 CVE-2015-2661 · GHSA-3r96-g8cq-424w

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to…

LOW 11

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to affect availability via unknown vectors related to Client.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00411 Published 2015-07-16 Fixed