The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.36. It is, therefore, affected by vulnerabilities in the following components :

  - ENFED
  - Federated
  - Partition
  - Replication
  - XML

This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page (CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4287, CVE-2014-4274, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6484, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559)

After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page. (CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4287, CVE-2014-4274, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6484, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559)

After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1859 advisory.

    [5.5.40-2]     filter perl(GD) from Requires (perl-gd is not available for RHEL5)       Resolves: #1160514

    [5.5.40-1]
    - Rebase to 5.5.40       Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464       CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520       CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564       Resolves: #1160514

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 10.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.9 advisory.

  - Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote     authenticated users to affect availability via unknown vectors related to Partition. (CVE-2014-2419)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and     earlier allows remote authenticated users to affect availability via vectors related to XML.
    (CVE-2014-0384)

  - Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier     allows remote authenticated users to affect availability via unknown vectors related to Federated.
    (CVE-2014-2432)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote     authenticated users to affect availability via unknown vectors related to Replication. (CVE-2014-2438)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and     earlier allows remote authenticated users to affect availability via vectors related to ENFED.
    (CVE-2014-4243)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This MySQL update provides the following :

  - upgrade to version 5.5.39, [bnc#887580]

  - CVE's fixed: (CVE-2014-2484 / CVE-2014-4258 /     CVE-2014-4260 / CVE-2014-2494 / CVE-2014-4238 /     CVE-2014-4207 / CVE-2014-4233 / CVE-2014-4240 /     CVE-2014-4214 / CVE-2014-4243) See also:
    http://www.oracle.com/technetwork/topics/security/cpujul     2014-1972956.html

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section.
(CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4287, CVE-2014-4274, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6484, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559)

These updated packages upgrade MySQL to version 5.5.40. Refer to the MySQL Release Notes listed in the References section for a complete list of changes.

All MySQL users should upgrade to these updated packages, which correct these issues. After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.

The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.16. It is, therefore, affected by vulnerabilities in the following components :

  - DML
  - ENFED
  - Federated
  - MyISAM
  - Optimizer
  - Partition
  - Privileges
  - Replication
  - XML

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1861 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary     compatible with MySQL.

    This update fixes several vulnerabilities in the MariaDB database server.
    Information about these flaws can be found on the Oracle Critical Patch     Update Advisory page, listed in the References section. (CVE-2014-2494,     CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4287,     CVE-2014-4274, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6484,     CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551,     CVE-2014-6555, CVE-2014-6559)

    These updated packages upgrade MariaDB to version 5.5.40. Refer to the     MariaDB Release Notes listed in the References section for a complete list     of changes.

    All MariaDB users should upgrade to these updated packages, which correct     these issues. After installing this update, the MariaDB server daemon     (mysqld) will be restarted automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1861 advisory.

    - Rebase to 5.5.40       Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464       CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520       CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564       Resolves: #1160548

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update provides MariaDB 5.5.42, which fixes several security issues and other bugs. Please refer to the Oracle Critical Patch Update Advisories and the Release Notes for MariaDB for further information regarding the security vulnerabilities.

Additionally the jemalloc packages is being provided as it was previousely provided with the mariadb source code, built and used but removed from the mariadb source code since 5.5.40.

The version of MariaDB installed on the remote host is prior to 5.5.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.36 advisory.

  - Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote     authenticated users to affect availability via unknown vectors related to Partition. (CVE-2014-2419)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and     earlier allows remote authenticated users to affect availability via vectors related to XML.
    (CVE-2014-0384)

  - Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier     allows remote authenticated users to affect availability via unknown vectors related to Federated.
    (CVE-2014-2432)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote     authenticated users to affect availability via unknown vectors related to Replication. (CVE-2014-2438)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and     earlier allows remote authenticated users to affect availability via vectors related to ENFED.
    (CVE-2014-4243)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated mariadb packages that fix several security issues are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section.
(CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4287, CVE-2014-4274, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6484, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559)

These updated packages upgrade MariaDB to version 5.5.40. Refer to the MariaDB Release Notes listed in the References section for a complete list of changes.

All MariaDB users should upgrade to these updated packages, which correct these issues. After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
73572	MySQL 5.5.x < 5.5.36 Multiple Vulnerabilities	Nessus	Databases	2014/4/16	2019/3/27	high
79304	Scientific Linux Security Update : mariadb on SL7.x x86_64 (20141117)	Nessus	Scientific Linux Local Security Checks	2014/11/18	2021/1/14	medium
79305	Scientific Linux Security Update : mysql55-mysql on SL5.x i386/x86_64 (20141117)	Nessus	Scientific Linux Local Security Checks	2014/11/18	2021/1/14	medium
79369	Oracle Linux 5 : mysql55-mysql (ELSA-2014-1859)	Nessus	Oracle Linux Local Security Checks	2014/11/21	2025/4/29	low
72713	MariaDB 10.0.0 < 10.0.9 Multiple Vulnerabilities	Nessus	Databases	2019/9/17	2026/1/29	medium
77435	SuSE 11.3 Security Update : MySQL (SAT Patch Number 9624)	Nessus	SuSE Local Security Checks	2014/8/29	2021/1/19	medium
79302	RHEL 5 : mysql55-mysql (RHSA-2014:1859)	Nessus	Red Hat Local Security Checks	2014/11/18	2021/1/14	high
73573	MySQL 5.6.x < 5.6.16 Multiple Vulnerabilities	Nessus	Databases	2014/4/16	2018/11/15	medium
77434	SuSE 11.3 Security Update : MySQL (SAT Patch Number 9624)	Nessus	SuSE Local Security Checks	2014/8/29	2021/1/19	medium
79303	RHEL 7 : mariadb (RHSA-2014:1861)	Nessus	Red Hat Local Security Checks	2014/11/18	2024/11/4	high
79370	Oracle Linux 7 : mariadb (ELSA-2014-1861)	Nessus	Oracle Linux Local Security Checks	2014/11/21	2024/11/1	high
82344	Mandriva Linux Security Advisory : mariadb (MDVSA-2015:091)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/14	high
72712	MariaDB 5.5.0 < 5.5.36 Multiple Vulnerabilities	Nessus	Databases	2014/2/26	2026/1/29	medium
79299	CentOS 5 : mysql55-mysql (CESA-2014:1859)	Nessus	CentOS Local Security Checks	2014/11/18	2021/1/4	medium
79300	CentOS 7 : mariadb (CESA-2014:1861)	Nessus	CentOS Local Security Checks	2014/11/18	2021/1/4	medium

检测

插件搜索

high

medium

medium

low

medium

medium

high

medium

medium

high

high

high

medium

medium

medium