Test ID:	1.3.6.1.4.1.25623.1.1.10.2018.0259
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2018-0259)
Summary:	The remote host is missing an update for the 'mariadb' package(s) announced via the MGASA-2018-0259 advisory.
Description:	Summary: The remote host is missing an update for the 'mariadb' package(s) announced via the MGASA-2018-0259 advisory. Vulnerability Insight: Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: Replication). Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MariaDB Server executes to compromise MariaDB Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MariaDB Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MariaDB Server (CVE-2018-2755). Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Client programs). Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2018-2761). Vulnerability in the MariaDB Server component of MariaDB (subcomponent: InnoDB). Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2018-2766). Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: Locking). Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2018-2771). Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: Optimizer). Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2018-2781). Vulnerability in the MariaDB Server component of MariaDB (subcomponent: InnoDB). Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2018-2782). Vulnerability in the MariaDB Server component of MariaDB (subcomponent: InnoDB). Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'mariadb' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-2755 BugTraq ID: 103807 http://www.securityfocus.com/bid/103807 Debian Security Information: DSA-4176 (Google Search) https://www.debian.org/security/2018/dsa-4176 Debian Security Information: DSA-4341 (Google Search) https://www.debian.org/security/2018/dsa-4341 https://security.gentoo.org/glsa/201908-24 https://lists.debian.org/debian-lts-announce/2018/04/msg00020.html https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html RedHat Security Advisories: RHSA-2018:1254 https://access.redhat.com/errata/RHSA-2018:1254 RedHat Security Advisories: RHSA-2018:2439 https://access.redhat.com/errata/RHSA-2018:2439 RedHat Security Advisories: RHSA-2018:2729 https://access.redhat.com/errata/RHSA-2018:2729 RedHat Security Advisories: RHSA-2018:3655 https://access.redhat.com/errata/RHSA-2018:3655 RedHat Security Advisories: RHSA-2019:1258 https://access.redhat.com/errata/RHSA-2019:1258 http://www.securitytracker.com/id/1040698 https://usn.ubuntu.com/3629-1/ https://usn.ubuntu.com/3629-2/ https://usn.ubuntu.com/3629-3/ Common Vulnerability Exposure (CVE) ID: CVE-2018-2761 BugTraq ID: 103820 http://www.securityfocus.com/bid/103820 Common Vulnerability Exposure (CVE) ID: CVE-2018-2766 BugTraq ID: 103805 http://www.securityfocus.com/bid/103805 Common Vulnerability Exposure (CVE) ID: CVE-2018-2771 BugTraq ID: 103828 http://www.securityfocus.com/bid/103828 Common Vulnerability Exposure (CVE) ID: CVE-2018-2781 BugTraq ID: 103825 http://www.securityfocus.com/bid/103825 Common Vulnerability Exposure (CVE) ID: CVE-2018-2782 BugTraq ID: 103799 http://www.securityfocus.com/bid/103799 Common Vulnerability Exposure (CVE) ID: CVE-2018-2784 BugTraq ID: 103801 http://www.securityfocus.com/bid/103801 Common Vulnerability Exposure (CVE) ID: CVE-2018-2787 BugTraq ID: 103804 http://www.securityfocus.com/bid/103804 Common Vulnerability Exposure (CVE) ID: CVE-2018-2813 BugTraq ID: 103830 http://www.securityfocus.com/bid/103830 Common Vulnerability Exposure (CVE) ID: CVE-2018-2817 BugTraq ID: 103818 http://www.securityfocus.com/bid/103818 Common Vulnerability Exposure (CVE) ID: CVE-2018-2819 BugTraq ID: 103814 http://www.securityfocus.com/bid/103814
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.