Red Hat Security AdvisoryRHSA-2020:4174
rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update
Released 2020-10-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mariadb102-galera-25.3.29-1.el6, rh-mariadb102-mariadb-1:10.2.33-1.el6, rh-mariadb102-mariadb-backup-1:10.2.33-1.el6 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mariadb102-galera-25.3.29-1.el7, rh-mariadb102-mariadb-1:10.2.33-1.el7, rh-mariadb102-mariadb-backup-1:10.2.33-1.el7 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-mariadb102-galera-25.3.29-1.el7, rh-mariadb102-mariadb-1:10.2.33-1.el7, rh-mariadb102-mariadb-backup-1:10.2.33-1.el7 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-mariadb102-galera-25.3.29-1.el7, rh-mariadb102-mariadb-1:10.2.33-1.el7, rh-mariadb102-mariadb-backup-1:10.2.33-1.el7 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mariadb102-galera-25.3.29-1.el6, rh-mariadb102-mariadb-1:10.2.33-1.el6, rh-mariadb102-mariadb-backup-1:10.2.33-1.el6 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mariadb102-galera-25.3.29-1.el7, rh-mariadb102-mariadb-1:10.2.33-1.el7, rh-mariadb102-mariadb-backup-1:10.2.33-1.el7 +18
Fixes 18 records
Priority MEDIUM 43
libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02396 · Published 2020-05-20 · Fixed
Priority LOW 36
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04005 · Published 2019-07-23 · Partial fix
Priority LOW 35
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03756 · Published 2019-10-16 · Partial fix
Priority LOW 35
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03699 · Published 2019-07-23 · Partial fix
Priority LOW 34
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0245 · Published 2020-04-15 · Partial fix
Priority LOW 33
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03514 · Published 2020-01-15 · Partial fix
Priority LOW 30
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.03014 · Published 2020-04-15 · Partial fix
Priority LOW 30
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.03061 · Published 2019-07-23 · Partial fix
Priority LOW 29
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.02336 · Published 2020-04-15 · Partial fix
Priority LOW 29
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.03951 · Published 2019-07-23 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02805 · Published 2020-04-15 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.03006 · Published 2020-04-15 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02799 · Published 2019-04-23 · Partial fix
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0298 · Published 2019-04-23 · Partial fix
Priority LOW 26
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
CVSS 3.1MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.02985 · Published 2019-10-16 · Partial fix
Priority LOW 26
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).
CVSS 3.1MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.02782 · Published 2019-04-23 · Partial fix
Priority LOW 25
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
CVSS 3.1MEDIUM 5.1· Local · High privileges · No interaction · EPSS 0.00796 · Published 2019-07-23 · Partial fix
Priority LOW 22
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.02518 · Published 2020-04-15 · Partial fix
THREATIST.IORead the docs