Red Hat Security AdvisoryRHSA-2016:0534
mariadb security and bug fix update
Released 2016-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixes 27 records
Priority MEDIUM 42
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.30146 · Published 2015-10-21 · Partial fix
Priority MEDIUM 40
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.07505 · Published 2016-01-21 · Partial fix
Priority LOW 35
Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00381 · Published 2016-07-21 · Partial fix
Priority LOW 33
The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Perc…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03741 · Published 2016-01-27 · Partial fix CWE-254
Priority LOW 32
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integr…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0059 · Published 2016-01-21 · Partial fix
Priority LOW 32
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00454 · Published 2015-10-21 · Partial fix
Priority LOW 29
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.07451 · Published 2015-10-21 · Partial fix
Priority LOW 28
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01352 · Published 2016-04-21 · Partial fix
Priority LOW 28
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML.
CVSS 2.0MEDIUM 4.6· Network · Low privileges · Interaction — · EPSS 0.04207 · Published 2015-10-21 · Partial fix
Priority LOW 26
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors relate…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.04284 · Published 2016-01-21 · Partial fix
Priority LOW 26
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.043 · Published 2016-01-21 · Partial fix
Priority LOW 26
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.043 · Published 2016-01-21 · Partial fix
Priority LOW 26
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-49…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03952 · Published 2015-10-21 · Partial fix
Priority LOW 26
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerabi…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.04193 · Published 2015-10-21 · Partial fix
Priority LOW 25
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03722 · Published 2015-10-21 · Partial fix
Priority LOW 24
Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.
CVSS 3.1MEDIUM 4.7· Local · High privileges · No interaction · EPSS 0.0119 · Published 2016-04-21 · Partial fix
Priority LOW 24
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.03944 · Published 2016-01-21 · Partial fix
Priority LOW 24
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrit…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.0423 · Published 2016-01-21 · Partial fix
Priority LOW 24
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.03944 · Published 2016-01-21 · Partial fix
Priority LOW 24
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.03944 · Published 2016-01-21 · Partial fix
Priority LOW 24
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03006 · Published 2015-10-21 · Partial fix
Priority LOW 24
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03006 · Published 2015-10-21 · Partial fix
Priority LOW 23
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.03548 · Published 2015-10-21 · Partial fix
Priority LOW 23
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.03548 · Published 2015-10-21 · Partial fix
Priority LOW 21
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.
CVSS 2.0LOW 2.8· Network · Low privileges · Interaction — · EPSS 0.03974 · Published 2015-10-21 · Partial fix
Priority LOW 17
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi…
CVSS 2.0LOW 1.7· Network · Low privileges · Interaction — · EPSS 0.04425 · Published 2016-01-21 · Partial fix
Priority LOW 16
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerabi…
CVSS 2.0LOW 1.7· Network · Low privileges · Interaction — · EPSS 0.03861 · Published 2015-10-21 · Partial fix