Test ID:	1.3.6.1.4.1.25623.1.1.2.2021.1055
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2021-1055)
Summary:	The remote host is missing an update for the Huawei EulerOS 'mariadb' package(s) announced via the EulerOS-SA-2021-1055 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'mariadb' package(s) announced via the EulerOS-SA-2021-1055 advisory. Vulnerability Insight: Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. (CVE-2020-2574) Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). (CVE-2019-2974) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). (CVE-2019-2481) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). (CVE-2019-2455) Affected Software/OS: 'mariadb' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.2.0. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-2455 BugTraq ID: 106628 http://www.securityfocus.com/bid/106628 RedHat Security Advisories: RHSA-2019:1258 https://access.redhat.com/errata/RHSA-2019:1258 RedHat Security Advisories: RHSA-2019:2484 https://access.redhat.com/errata/RHSA-2019:2484 RedHat Security Advisories: RHSA-2019:2511 https://access.redhat.com/errata/RHSA-2019:2511 https://usn.ubuntu.com/3867-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-2481 BugTraq ID: 106619 http://www.securityfocus.com/bid/106619 Common Vulnerability Exposure (CVE) ID: CVE-2019-2974 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKCJLNRK6RHFAHV7ZFD3XO7HNSBU3XOL/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7X5D3O4TOQ57KL5FLQEXH2JB2UQYHCUZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DTUCXX5XXPNPFV2PHP6IESGTCFMZOFP/ https://security.gentoo.org/glsa/202105-27 http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html SuSE Security Announcement: openSUSE-SU-2019:2698 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html https://usn.ubuntu.com/4195-1/ https://usn.ubuntu.com/4195-2/ Common Vulnerability Exposure (CVE) ID: CVE-2020-2574 https://www.oracle.com/security-alerts/cpujan2020.html http://www.openwall.com/lists/oss-security/2020/09/29/1 SuSE Security Announcement: openSUSE-SU-2020:0289 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html https://usn.ubuntu.com/4250-1/ https://usn.ubuntu.com/4250-2/
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.