Red Hat Security Advisory

RHSA-2019:1258

rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update

Released 2019-05-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mariadb102-galera-25.3.25-1.el6, rh-mariadb102-mariadb-1:10.2.22-1.el6, rh-mariadb102-mariadb-backup-1:10.2.22-1.el6 +18
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mariadb102-galera-25.3.25-1.el7, rh-mariadb102-mariadb-1:10.2.22-1.el7, rh-mariadb102-mariadb-backup-1:10.2.22-1.el7 +18
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-mariadb102-galera-25.3.25-1.el7, rh-mariadb102-mariadb-1:10.2.22-1.el7, rh-mariadb102-mariadb-backup-1:10.2.22-1.el7 +18
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-mariadb102-galera-25.3.25-1.el7, rh-mariadb102-mariadb-1:10.2.22-1.el7, rh-mariadb102-mariadb-backup-1:10.2.22-1.el7 +18
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-mariadb102-galera-25.3.25-1.el7, rh-mariadb102-mariadb-1:10.2.22-1.el7, rh-mariadb102-mariadb-backup-1:10.2.22-1.el7 +18
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mariadb102-galera-25.3.25-1.el6, rh-mariadb102-mariadb-1:10.2.22-1.el6, rh-mariadb102-mariadb-backup-1:10.2.22-1.el6 +18
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mariadb102-galera-25.3.25-1.el7, rh-mariadb102-mariadb-1:10.2.22-1.el7, rh-mariadb102-mariadb-backup-1:10.2.22-1.el7 +18

Fixes 47 records

TI-2017-11278 CVE-2017-15365 · GHSA-5qvf-c9w3-cfj9

sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona…

MEDIUM 44

sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass i…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03314 Published 2018-01-25 Partial fix

TI-2018-02366 CVE-2018-3064 · GHSA-9qrf-wvj4-2j5f

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.03076 Published 2018-07-18 Partial fix

TI-2018-02065 CVE-2018-2755 · GHSA-qfwc-cmfr-mqv2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1HIGH 7.7 Local No auth User interaction EPSS 0.00849 Published 2018-04-19 Partial fix

TI-2018-01881 CVE-2018-2562 · GHSA-q32c-6q72-859m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.03417 Published 2018-01-18 Partial fix

TI-2018-01987 CVE-2018-2668 · GHSA-82c4-rq4j-g547

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03985 Published 2018-01-18 Partial fix

TI-2018-01984 CVE-2018-2665 · GHSA-7gx2-3v22-76w6

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03985 Published 2018-01-18 Partial fix

TI-2018-01959 CVE-2018-2640 · GHSA-8grv-x4rj-m9hw

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03985 Published 2018-01-18 Partial fix

TI-2018-01941 CVE-2018-2622 · GHSA-vj8v-mgvv-9557

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03985 Published 2018-01-18 Partial fix

TI-2019-02012 CVE-2019-2455 · GHSA-r88f-7f8h-mc36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03795 Published 2019-01-16 Partial fix

TI-2018-02446 CVE-2018-3156 · GHSA-pwjp-68fq-p9qx

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03716 Published 2018-10-17 Partial fix

TI-2018-02433 CVE-2018-3143 · GHSA-75qr-prmr-3ww8

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03716 Published 2018-10-17 Partial fix

TI-2018-02128 CVE-2018-2819 · GHSA-v34f-wr7v-83xp

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03176 Published 2018-04-19 Partial fix

TI-2018-02126 CVE-2018-2817 · GHSA-g7c5-cc45-397q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03176 Published 2018-04-19 Partial fix

TI-2018-01931 CVE-2018-2612 · GHSA-fxrq-c6hq-q5jr

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.03751 Published 2018-01-18 Partial fix

TI-2017-07717 CVE-2017-10378 · GHSA-wp4q-xxr9-wwm7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03264 Published 2017-10-19 Partial fix

TI-2018-02538 CVE-2018-3251 · GHSA-g8fx-g5fv-qphm

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03053 Published 2018-10-17 Partial fix

TI-2018-02423 CVE-2018-3133 · GHSA-62r4-9fpf-c245

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02924 Published 2018-10-17 Partial fix

TI-2018-02362 CVE-2018-3060 · GHSA-f2x7-pmw5-f3c9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0291 Published 2018-07-18 Fixed

TI-2018-02093 CVE-2018-2784 · GHSA-8m2v-9736-x6w9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02995 Published 2018-04-19 Partial fix

TI-2018-02091 CVE-2018-2782 · GHSA-848q-653w-gw2r

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02995 Published 2018-04-19 Partial fix

TI-2019-02060 CVE-2019-2503 · GHSA-px7j-2qhq-c538

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling).

CVSS 3.1MEDIUM 6.4 Adjacent network Low privileges No interaction EPSS 0.02507 Published 2019-01-16 Partial fix

TI-2018-02070 CVE-2018-2761 · GHSA-3639-c3mm-hf33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.04016 Published 2018-04-19 Partial fix

TI-2019-02092 CVE-2019-2537 · GHSA-cxvc-c563-9w9g

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.04266 Published 2019-01-16 Partial fix

TI-2018-02475 CVE-2018-3185 · GHSA-mm2w-vmg6-v772

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.02563 Published 2018-10-17 Fixed

TI-2018-02096 CVE-2018-2787 · GHSA-c8vh-37vm-4jj7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.02576 Published 2018-04-19 Partial fix

TI-2018-02095 CVE-2018-2786 · GHSA-rv27-q7pp-jv9w

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.02509 Published 2018-04-19 Fixed

TI-2019-02067 CVE-2019-2510 · GHSA-g2qv-pxr5-f3q6

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03443 Published 2019-01-16 Partial fix

TI-2018-02568 CVE-2018-3282 · GHSA-hv5g-3886-rpxc

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.04 Published 2018-10-17 Partial fix

TI-2020-11399 CVE-2020-14550 · GHSA-mg2j-853w-r6h2

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

LOW 28

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02239 Published 2020-07-15 Partial fix

TI-2018-02452 CVE-2018-3162 · GHSA-mpqf-2mqw-f977

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03254 Published 2018-10-17 Fixed

TI-2018-02383 CVE-2018-3081 · GHSA-vhpw-hq94-hjjr

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client…

LOW 28

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.0 Network High privileges No interaction EPSS 0.02687 Published 2018-07-18 Partial fix

TI-2018-02365 CVE-2018-3063 · GHSA-g8gr-2h7q-7749

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03198 Published 2018-07-18 Partial fix

TI-2018-02119 CVE-2018-2810 · GHSA-6x8g-f68r-6fqp

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0303 Published 2018-04-19 Fixed

TI-2018-02090 CVE-2018-2781 · GHSA-gffv-5f9p-845q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.033 Published 2018-04-19 Partial fix

TI-2018-02086 CVE-2018-2777 · GHSA-2fvq-w5h5-q4v5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0303 Published 2018-04-19 Fixed

TI-2018-02075 CVE-2018-2766 · GHSA-hx7p-wjjj-fw2p

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03083 Published 2018-04-19 Partial fix

TI-2018-02068 CVE-2018-2759 · GHSA-c3xj-jgg3-49jx

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02809 Published 2018-04-19 Fixed

TI-2018-02563 CVE-2018-3277 · GHSA-p9p2-rpmj-vhww

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02673 Published 2018-10-17 Fixed

TI-2018-02489 CVE-2018-3200 · GHSA-pg9c-x6hj-pgx5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02673 Published 2018-10-17 Fixed

TI-2018-02463 CVE-2018-3173 · GHSA-w246-mm99-6c5j

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02673 Published 2018-10-17 Fixed

TI-2018-02080 CVE-2018-2771 · GHSA-5w5p-84h5-p49m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.03598 Published 2018-04-19 Partial fix

TI-2018-02464 CVE-2018-3174 · GHSA-x7c7-vrm4-2pvw

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 26

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.3 Local High privileges No interaction EPSS 0.00817 Published 2018-10-17 Partial fix

TI-2018-02570 CVE-2018-3284 · GHSA-mqjx-3597-63jr

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.023 Published 2018-10-17 Fixed

TI-2018-02360 CVE-2018-3058 · GHSA-qg26-735q-4c75

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02451 Published 2018-07-18 Partial fix

TI-2018-02122 CVE-2018-2813 · GHSA-9v4g-rvq8-4rmh

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02573 Published 2018-04-19 Partial fix

TI-2018-02368 CVE-2018-3066 · GHSA-hg5j-c849-7q67

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options).

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.01949 Published 2018-07-18 Partial fix

TI-2017-07619 CVE-2017-10268 · GHSA-v298-4xpp-8q7w

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00702 Published 2017-10-19 Partial fix