Red Hat Security Advisory

RHSA-2018:2439

mariadb security and bug fix update

Released 2018-08-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-libs-1:5.5.60-1.el7_5, mariadb-server-1:5.5.60-1.el7_5
Red Hat Enterprise Linux Client Optional (v. 7) mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5, mariadb-embedded-1:5.5.60-1.el7_5 +2
Red Hat Enterprise Linux ComputeNode (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-libs-1:5.5.60-1.el7_5
Red Hat Enterprise Linux ComputeNode Optional (v. 7) mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5, mariadb-embedded-1:5.5.60-1.el7_5 +3
Red Hat Enterprise Linux Server (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5 +5
Red Hat Enterprise Linux Server Optional (v. 7) mariadb-embedded-1:5.5.60-1.el7_5, mariadb-embedded-1:5.5.60-1.el7_5.ppc, mariadb-embedded-devel-1:5.5.60-1.el7_5 +1
Red Hat Enterprise Linux Workstation (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5 +3
Red Hat Enterprise Linux Workstation Optional (v. 7) mariadb-embedded-1:5.5.60-1.el7_5, mariadb-embedded-devel-1:5.5.60-1.el7_5
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) mariadb-1:5.5.60-1.el7_5, mariadb-bench-1:5.5.60-1.el7_5, mariadb-devel-1:5.5.60-1.el7_5 +3
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) mariadb-embedded-1:5.5.60-1.el7_5, mariadb-embedded-devel-1:5.5.60-1.el7_5

Fixes 23 records

TI-2018-02065 CVE-2018-2755 · GHSA-qfwc-cmfr-mqv2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1HIGH 7.7 Local No auth User interaction EPSS 0.00849 Published 2018-04-19 Partial fix

TI-2018-01881 CVE-2018-2562 · GHSA-q32c-6q72-859m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.03417 Published 2018-01-18 Partial fix

TI-2018-01987 CVE-2018-2668 · GHSA-82c4-rq4j-g547

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03985 Published 2018-01-18 Partial fix

TI-2018-01984 CVE-2018-2665 · GHSA-7gx2-3v22-76w6

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03985 Published 2018-01-18 Partial fix

TI-2018-01959 CVE-2018-2640 · GHSA-8grv-x4rj-m9hw

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03985 Published 2018-01-18 Partial fix

TI-2018-01941 CVE-2018-2622 · GHSA-vj8v-mgvv-9557

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03985 Published 2018-01-18 Partial fix

TI-2019-02012 CVE-2019-2455 · GHSA-r88f-7f8h-mc36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03795 Published 2019-01-16 Partial fix

TI-2018-02128 CVE-2018-2819 · GHSA-v34f-wr7v-83xp

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03176 Published 2018-04-19 Partial fix

TI-2018-02126 CVE-2018-2817 · GHSA-g7c5-cc45-397q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03176 Published 2018-04-19 Partial fix

TI-2017-07717 CVE-2017-10378 · GHSA-wp4q-xxr9-wwm7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03264 Published 2017-10-19 Partial fix

TI-2018-02423 CVE-2018-3133 · GHSA-62r4-9fpf-c245

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02924 Published 2018-10-17 Partial fix

TI-2017-07723 CVE-2017-10384 · GHSA-w2fh-3rw7-vr98

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03103 Published 2017-10-19 Partial fix

TI-2018-02070 CVE-2018-2761 · GHSA-3639-c3mm-hf33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.04016 Published 2018-04-19 Partial fix

TI-2017-07718 CVE-2017-10379 · GHSA-hr5m-vvhf-96cx

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02298 Published 2017-10-19 Partial fix CWE-863

TI-2018-02090 CVE-2018-2781 · GHSA-gffv-5f9p-845q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.033 Published 2018-04-19 Partial fix

TI-2017-02833 CVE-2017-3641 · GHSA-pvvc-fmf7-5pf7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03225 Published 2017-08-08 Partial fix

TI-2018-02080 CVE-2018-2771 · GHSA-5w5p-84h5-p49m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.03598 Published 2018-04-19 Partial fix

TI-2018-02122 CVE-2018-2813 · GHSA-9v4g-rvq8-4rmh

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02573 Published 2018-04-19 Partial fix

TI-2017-02843 CVE-2017-3651 · GHSA-h2r9-q8w8-hpcr

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 24

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0215 Published 2017-08-08 Partial fix

TI-2017-02828 CVE-2017-3636 · GHSA-c28x-42jj-83gc

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 24

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00438 Published 2017-08-08 Partial fix

TI-2017-07619 CVE-2017-10268 · GHSA-v298-4xpp-8q7w

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00702 Published 2017-10-19 Partial fix

TI-2017-02845 CVE-2017-3653 · GHSA-fhc7-95hq-9w87

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 19

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.01887 Published 2017-08-08 Partial fix

TI-2018-02076 CVE-2018-2767 · GHSA-qhg6-x5p3-8653

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 18

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption).

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.01579 Published 2018-07-18 Partial fix