Red Hat Security AdvisoryRHSA-2016:2927
rh-mariadb100-mariadb security update
Released 2016-12-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mariadb100-mariadb-1:10.0.28-5.el6, rh-mariadb100-mariadb-bench-1:10.0.28-5.el6, rh-mariadb100-mariadb-common-1:10.0.28-5.el6 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mariadb100-mariadb-1:10.0.28-5.el7, rh-mariadb100-mariadb-bench-1:10.0.28-5.el7, rh-mariadb100-mariadb-common-1:10.0.28-5.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mariadb100-mariadb-1:10.0.28-5.el6, rh-mariadb100-mariadb-bench-1:10.0.28-5.el6, rh-mariadb100-mariadb-common-1:10.0.28-5.el6 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) rh-mariadb100-mariadb-1:10.0.28-5.el7, rh-mariadb100-mariadb-bench-1:10.0.28-5.el7, rh-mariadb100-mariadb-common-1:10.0.28-5.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mariadb100-mariadb-1:10.0.28-5.el7, rh-mariadb100-mariadb-bench-1:10.0.28-5.el7, rh-mariadb100-mariadb-common-1:10.0.28-5.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mariadb100-mariadb-1:10.0.28-5.el6, rh-mariadb100-mariadb-bench-1:10.0.28-5.el6, rh-mariadb100-mariadb-common-1:10.0.28-5.el6 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mariadb100-mariadb-1:10.0.28-5.el7, rh-mariadb100-mariadb-bench-1:10.0.28-5.el7, rh-mariadb100-mariadb-common-1:10.0.28-5.el7 +6
Fixes 11 records
Priority HIGH 79
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.6773 · Published 2016-09-20 · Partial fix CWE-264
Priority LOW 39
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.06816 · Published 2016-10-25 · Partial fix
Priority LOW 38
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.04313 · Published 2016-12-13 · Partial fix CWE-362
Priority LOW 38
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0634 · Published 2016-10-25 · Partial fix
Priority LOW 37
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.05111 · Published 2016-10-25 · Partial fix
Priority LOW 36
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.02662 · Published 2017-04-24 · Partial fix
Priority LOW 35
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03714 · Published 2016-10-25 · Partial fix
Priority LOW 30
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.06976 · Published 2016-10-25 · Partial fix
Priority LOW 28
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.03316 · Published 2016-10-25 · Partial fix
Priority LOW 26
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02023 · Published 2016-10-25 · Fixed
Priority LOW 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0215 · Published 2017-08-08 · Partial fix
THREATIST.IORead the docs