ID de Prueba:	1.3.6.1.4.1.25623.1.0.120727
Categoría:	Amazon Linux Local Security Checks
Título:	Amazon Linux: Security Advisory (ALAS-2016-738)
Resumen:	The remote host is missing an update for the 'mysql55' package(s) announced via the ALAS-2016-738 advisory.
Descripción:	Summary: The remote host is missing an update for the 'mysql55' package(s) announced via the ALAS-2016-738 advisory. Vulnerability Insight: It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a client. (CVE-2016-2047) Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows remote authenticated users to affect availability via vectors related to UDF. (CVE-2016-0608) Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows remote authenticated users to affect availability via unknown vectors related to privileges. (CVE-2016-0609) Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows remote authenticated users to affect availability via unknown vectors related to Options. (CVE-2016-0505) Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB. (CVE-2016-0600) Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer. (CVE-2016-0616) Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption. (CVE-2016-3452) Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier allows local users to affect availability via vectors related to DDL. (CVE-2016-0644) Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser. (CVE-2016-3477) Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows remote authenticated users to affect availability via vectors related to DML. (CVE-2016-0596) Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer. (CVE-2016-0597) Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier allows local users to affect integrity and availability via vectors related to DML. (CVE-2016-0640) Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types. (CVE-2016-3521) Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier allows local users to affect integrity and availability via vectors related to Federated. (CVE-2016-0642) Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier allows local users to affect confidentiality via vectors related to DML. (CVE-2016-0643) Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier allows local users to affect availability via vectors related to Security: Privileges. (CVE-2016-0666) Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'mysql55' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0505 BugTraq ID: 81088 http://www.securityfocus.com/bid/81088 Debian Security Information: DSA-3453 (Google Search) http://www.debian.org/security/2016/dsa-3453 Debian Security Information: DSA-3459 (Google Search) http://www.debian.org/security/2016/dsa-3459 RedHat Security Advisories: RHSA-2016:0534 http://rhn.redhat.com/errata/RHSA-2016-0534.html RedHat Security Advisories: RHSA-2016:0705 http://rhn.redhat.com/errata/RHSA-2016-0705.html RedHat Security Advisories: RHSA-2016:1132 https://access.redhat.com/errata/RHSA-2016:1132 RedHat Security Advisories: RHSA-2016:1480 http://rhn.redhat.com/errata/RHSA-2016-1480.html RedHat Security Advisories: RHSA-2016:1481 http://rhn.redhat.com/errata/RHSA-2016-1481.html http://www.securitytracker.com/id/1034708 SuSE Security Announcement: SUSE-SU-2016:1619 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html SuSE Security Announcement: SUSE-SU-2016:1620 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html SuSE Security Announcement: openSUSE-SU-2016:0367 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html SuSE Security Announcement: openSUSE-SU-2016:0377 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html SuSE Security Announcement: openSUSE-SU-2016:1664 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html SuSE Security Announcement: openSUSE-SU-2016:1686 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html http://www.ubuntu.com/usn/USN-2881-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-0546 BugTraq ID: 81066 http://www.securityfocus.com/bid/81066 Common Vulnerability Exposure (CVE) ID: CVE-2016-0596 BugTraq ID: 81130 http://www.securityfocus.com/bid/81130 Common Vulnerability Exposure (CVE) ID: CVE-2016-0597 BugTraq ID: 81151 http://www.securityfocus.com/bid/81151 Common Vulnerability Exposure (CVE) ID: CVE-2016-0598 BugTraq ID: 81182 http://www.securityfocus.com/bid/81182 Common Vulnerability Exposure (CVE) ID: CVE-2016-0600 BugTraq ID: 81188 http://www.securityfocus.com/bid/81188 Common Vulnerability Exposure (CVE) ID: CVE-2016-0606 Common Vulnerability Exposure (CVE) ID: CVE-2016-0608 BugTraq ID: 81226 http://www.securityfocus.com/bid/81226 Common Vulnerability Exposure (CVE) ID: CVE-2016-0609 BugTraq ID: 81258 http://www.securityfocus.com/bid/81258 Common Vulnerability Exposure (CVE) ID: CVE-2016-0616 BugTraq ID: 81176 http://www.securityfocus.com/bid/81176 Common Vulnerability Exposure (CVE) ID: CVE-2016-0640 BugTraq ID: 86427 http://www.securityfocus.com/bid/86427 Debian Security Information: DSA-3557 (Google Search) http://www.debian.org/security/2016/dsa-3557 Debian Security Information: DSA-3595 (Google Search) http://www.debian.org/security/2016/dsa-3595 RedHat Security Advisories: RHSA-2016:1602 http://rhn.redhat.com/errata/RHSA-2016-1602.html http://www.securitytracker.com/id/1035606 SuSE Security Announcement: SUSE-SU-2016:1279 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html SuSE Security Announcement: openSUSE-SU-2016:1332 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html http://www.ubuntu.com/usn/USN-2953-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-0641 BugTraq ID: 86470 http://www.securityfocus.com/bid/86470 Common Vulnerability Exposure (CVE) ID: CVE-2016-0642 BugTraq ID: 86445 http://www.securityfocus.com/bid/86445 http://www.ubuntu.com/usn/USN-2954-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-0643 BugTraq ID: 86486 http://www.securityfocus.com/bid/86486 Common Vulnerability Exposure (CVE) ID: CVE-2016-0644 BugTraq ID: 86442 http://www.securityfocus.com/bid/86442 Common Vulnerability Exposure (CVE) ID: CVE-2016-0646 BugTraq ID: 86436 http://www.securityfocus.com/bid/86436 Common Vulnerability Exposure (CVE) ID: CVE-2016-0647 BugTraq ID: 86495 http://www.securityfocus.com/bid/86495 Common Vulnerability Exposure (CVE) ID: CVE-2016-0648 BugTraq ID: 86457 http://www.securityfocus.com/bid/86457 Common Vulnerability Exposure (CVE) ID: CVE-2016-0649 BugTraq ID: 86498 http://www.securityfocus.com/bid/86498 Common Vulnerability Exposure (CVE) ID: CVE-2016-0650 BugTraq ID: 86496 http://www.securityfocus.com/bid/86496 Common Vulnerability Exposure (CVE) ID: CVE-2016-0651 Common Vulnerability Exposure (CVE) ID: CVE-2016-0666 BugTraq ID: 86509 http://www.securityfocus.com/bid/86509 Common Vulnerability Exposure (CVE) ID: CVE-2016-2047 BugTraq ID: 81810 http://www.securityfocus.com/bid/81810 http://www.openwall.com/lists/oss-security/2016/01/26/3 Common Vulnerability Exposure (CVE) ID: CVE-2016-3452 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 BugTraq ID: 91999 http://www.securityfocus.com/bid/91999 http://www.securitytracker.com/id/1036362 Common Vulnerability Exposure (CVE) ID: CVE-2016-3477 BugTraq ID: 91902 http://www.securityfocus.com/bid/91902 Debian Security Information: DSA-3624 (Google Search) http://www.debian.org/security/2016/dsa-3624 Debian Security Information: DSA-3632 (Google Search) http://www.debian.org/security/2016/dsa-3632 RedHat Security Advisories: RHSA-2016:1601 http://rhn.redhat.com/errata/RHSA-2016-1601.html RedHat Security Advisories: RHSA-2016:1603 http://rhn.redhat.com/errata/RHSA-2016-1603.html RedHat Security Advisories: RHSA-2016:1604 http://rhn.redhat.com/errata/RHSA-2016-1604.html RedHat Security Advisories: RHSA-2016:1637 http://rhn.redhat.com/errata/RHSA-2016-1637.html SuSE Security Announcement: openSUSE-SU-2016:2278 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html http://www.ubuntu.com/usn/USN-3040-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-3521 BugTraq ID: 91932 http://www.securityfocus.com/bid/91932 Common Vulnerability Exposure (CVE) ID: CVE-2016-3615 BugTraq ID: 91960 http://www.securityfocus.com/bid/91960 Common Vulnerability Exposure (CVE) ID: CVE-2016-5440 BugTraq ID: 91953 http://www.securityfocus.com/bid/91953 Common Vulnerability Exposure (CVE) ID: CVE-2016-5444 BugTraq ID: 91987 http://www.securityfocus.com/bid/91987
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.