The version of MySQL running on the remote host is 5.6.x prior to 5.6.39. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL running on the remote host is 5.7.x prior to 5.7.20. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2638:01 advisory.

    * mysql: sha256_password authentication DoS via long password (CVE-2018-2696)
    * mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2562)
    * mysql: Server: GIS unspecified vulnerability (CPU Jan 2018) (CVE-2018-2573)
    * mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2583)
    * mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2590)
    * mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2591)
    * mysql: InnoDB unspecified vulnerability (CPU Jan 2018) (CVE-2018-2612)
    * mysql: Server: DDL unspecified vulnerability (CPU Jan 2018) (CVE-2018-2622)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2640)
    * mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2645)
    * mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2647)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2665)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2668)
    * mysql: sha256_password authentication DoS via hash with large rounds value     (CVE-2018-2703)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3442 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld,     and many client programs.

    The following packages have been upgraded to a later upstream version: rh-mysql57-mysql (5.7.20).
    (BZ#1505114)

    Security Fix(es):

    * This update fixes several vulnerabilities in the MySQL database server. Information about these flaws     can be found on the Oracle Critical Patch Update Advisory page listed in the References section.
    (CVE-2017-10155, CVE-2017-10165, CVE-2017-10167, CVE-2017-10227, CVE-2017-10268, CVE-2017-10276,     CVE-2017-10279, CVE-2017-10283, CVE-2017-10284, CVE-2017-10286, CVE-2017-10294, CVE-2017-10296,     CVE-2017-10311, CVE-2017-10313, CVE-2017-10314, CVE-2017-10320, CVE-2017-10365, CVE-2017-10378,     CVE-2017-10379, CVE-2017-10384)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
106099	MySQL 5.6.x < 5.6.39 Multiple Vulnerabilities (January 2018 CPU)	Nessus	Databases	2018/1/17	2025/11/3	high
106100	MySQL 5.6.x < 5.6.39 Multiple Vulnerabilities (RPM Check) (January 2018 CPU)	Nessus	Databases	2018/1/17	2025/11/3	high
104050	MySQL 5.7.x < 5.7.20 Multiple Vulnerabilities (October 2017 CPU)	Nessus	Databases	2017/10/20	2019/11/12	high
289524	MiracleLinux 4 : rh-mysql56-mysql-5.6.39-1.AXS4.1 (AXSA:2018-2638:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
210300	RHEL 6 / 7 : rh-mysql57-mysql (RHSA-2017:3442)	Nessus	Red Hat Local Security Checks	2024/11/5	2024/11/5	high

检测

插件搜索

high

high

high

high

high