The version of MySQL running on the remote host is 5.7.x prior to 5.7.25. It is, therefore, affected by multiple vulnerabilities, including three of the top vulnerabilities below, as noted in the January 2019 Critical Patch Update advisory:

  - An unspecified vulnerability in MySQL in the     'Server: Replication' subcomponent could allow an low     privileged attacker with network access via multiple     protocols to gain unauthorized access critical data or     complete access to all MySQL server data. (CVE-2019-2534)

  - An unspecified vulnerability in MySQL in the     'Server: Optimizer' subcomponent could allow an low     privileged attacker with network access via multiple     protocols to perform a denial of service attack.
    (CVE-2019-2529)

  - An unspecified vulnerability in MySQL in the     'Server: PS' subcomponent could allow an low     privileged attacker with network access via multiple     protocols to perform a denial of service attack.
    (CVE-2019-2482)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

** MySQL 5.7.25 **

Release notes :

https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-25.html

CVEs fixed :

CVE-2019-2420 CVE-2019-2434 CVE-2019-2455 CVE-2019-2481 CVE-2019-2482 CVE-2019-2486 CVE-2019-2503 CVE-2019-2507 CVE-2019-2510 CVE-2019-2528 CVE-2019-2529 CVE-2019-2531 CVE-2019-2532 CVE-2019-2534 CVE-2019-2537

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3867-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to     fix these issues.

    Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10 have been updated to MySQL 5.7.25.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:
    http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-25.html     https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2511 advisory.

    mecab     [0.996-1.9]
    - Release bump for rebuilding on new arches       Related: #1518842

    [0.996-1.8]
    - skip %verify of /etc/opt/rh/rh-mysql57/mecabrc       Resolves: #1382315

    [0.996-1.7]
    - Prefix library major number with SCL name in soname

    [0.996-1.6]
    - Require runtime package from the scl

    [0.996-1.5]
    - Convert to SCL package

    [0.996-1.4]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

    [0.996-1.3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

    [0.996-1.2]
    - Rebuilt for GCC 5 C++11 ABI change

    [0.996-1.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

    [0.996-1.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

    mecab-ipadic     [2.7.0.20070801-16.0.1]
    - Rename the LICENSE.Fedora to LICENSE.oracle

    [2.7.0.20070801-16]
    - Rename the LICENSE.fedora to LICENSE.rhel

    [2.7.0.20070801-15]
    - Release bump for rebuilding on new arches       Related: #1518842

    [2.7.0.20070801-14.1]
    - Require runtime package from the scl

    [2.7.0.20070801-13.1]
    - Convert to SCL package

    [2.7.0.20070801-12.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

    [2.7.0.20070801-11.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

    [2.7.0.20070801-10.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

    [2.7.0.20070801-9.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

    [2.7.0.20070801-8.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

    [2.7.0.20070801-7.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

    [2.7.0.20070801-6.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

    [2.7.0.20070801-5.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

    [2.7.0.20070801-4.1]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

    * Wed Jan 13 2010 Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>
    - Fix URL for Source2

    [2.7.0.20070801-3]
    - F-12: Mass rebuild

    [2.7.0.20070801-2]
    - F-11: Mass rebuild

    [2.7.0.20070801.dist.1]
    - License update

    [2.7.0.20070801]
    - New release 2.7.0-20070801

    [2.7.0.20070610]
    - New release 2.7.0-20070610

    [2.7.0.20060707-2]
    - Fix typo

    [2.7.0.20060707-1]
    - Initial packaging, based on mecab-jumandic spec file

    mysql     [8.0.17-3]
    - Use RELRO hardening on all binaries
    - Resolves: #1734420

    [8.0.17-2]
    - Use RELRO hardening on all binaries
    - Resolves: #1734420

    [8.0.17-1]
    - Rebase to 8.0.17
    - Resolves: #1732042
    - CVEs fixed:
      CVE-2019-2737 CVE-2019-2738 CVE-2019-2739 CVE-2019-2740 CVE-2019-2741       CVE-2019-2743 CVE-2019-2746 CVE-2019-2747 CVE-2019-2752 CVE-2019-2755       CVE-2019-2757 CVE-2019-2758 CVE-2019-2774 CVE-2019-2778 CVE-2019-2780       CVE-2019-2784 CVE-2019-2785 CVE-2019-2789 CVE-2019-2791 CVE-2019-2795       CVE-2019-2796 CVE-2019-2797 CVE-2019-2798 CVE-2019-2800 CVE-2019-2801       CVE-2019-2802 CVE-2019-2803 CVE-2019-2805 CVE-2019-2808 CVE-2019-2810       CVE-2019-2811 CVE-2019-2812 CVE-2019-2814 CVE-2019-2815 CVE-2019-2819       CVE-2019-2822 CVE-2019-2826 CVE-2019-2830 CVE-2019-2834 CVE-2019-2879

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2511 advisory.

  - mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) (CVE-2019-2420, CVE-2019-2481,     CVE-2019-2507, CVE-2019-2529, CVE-2019-2530)

  - mysql: Server: Parser unspecified vulnerability (CPU Jan 2019) (CVE-2019-2434, CVE-2019-2455)

  - mysql: Server: Replication unspecified vulnerability (CPU Jan 2019) (CVE-2019-2436, CVE-2019-2531,     CVE-2019-2534)

  - mysql: Server: PS unspecified vulnerability (CPU Jan 2019) (CVE-2019-2482)

  - mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019) (CVE-2019-2486,     CVE-2019-2532, CVE-2019-2533)

  - mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537)

  - mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2502, CVE-2019-2510)

  - mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019) (CVE-2019-2503)

  - mysql: Server: Partition unspecified vulnerability (CPU Jan 2019) (CVE-2019-2528)

  - mysql: Server: Options unspecified vulnerability (CPU Jan 2019) (CVE-2019-2535)

  - mysql: Server: Packaging unspecified vulnerability (CPU Jan 2019) (CVE-2019-2536)

  - mysql: Server: Connection unspecified vulnerability (CPU Jan 2019) (CVE-2019-2539)

  - mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2580, CVE-2019-2585, CVE-2019-2593,     CVE-2019-2624, CVE-2019-2628)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019) (CVE-2019-2581, CVE-2019-2596,     CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688,     CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695)

  - mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2584,     CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627)

  - mysql: Server: Partition unspecified vulnerability (CPU Apr 2019) (CVE-2019-2587)

  - mysql: Server: PS unspecified vulnerability (CPU Apr 2019) (CVE-2019-2592)

  - mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614, CVE-2019-2617,     CVE-2019-2630, CVE-2019-2634, CVE-2019-2635)

  - mysql: Server: Options unspecified vulnerability (CPU Apr 2019) (CVE-2019-2623, CVE-2019-2683)

  - mysql: Server: DDL unspecified vulnerability (CPU Apr 2019) (CVE-2019-2626, CVE-2019-2644)

  - mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2019) (CVE-2019-2631)

  - mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2019) (CVE-2019-2636)

  - mysql: Server: Security: Roles unspecified vulnerability (CPU Apr 2019) (CVE-2019-2691)

  - mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)

  - mysql: Server: Compiling unspecified vulnerability (CPU Jul 2019) (CVE-2019-2738)

  - mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739,     CVE-2019-2778, CVE-2019-2789, CVE-2019-2811)

  - mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)

  - mysql: Server: Options unspecified vulnerability (CPU Jul 2019) (CVE-2019-2752)

  - mysql: Server: Replication unspecified vulnerability (CPU Jul 2019) (CVE-2019-2755, CVE-2019-2800)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019) (CVE-2019-2757, CVE-2019-2774,     CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815,     CVE-2019-2830, CVE-2019-2834)

  - mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758, CVE-2019-2785, CVE-2019-2798,     CVE-2019-2814, CVE-2019-2879)

  - mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019) (CVE-2019-2780)

  - mysql: Server: DML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2784)

  - mysql: Server: Charsets unspecified vulnerability (CPU Jul 2019) (CVE-2019-2795)

  - mysql: Client programs unspecified vulnerability (CPU Jul 2019) (CVE-2019-2797)

  - mysql: Server: FTS unspecified vulnerability (CPU Jul 2019) (CVE-2019-2801)

  - mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)

  - mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2019) (CVE-2019-2819)

  - mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019) (CVE-2019-2826)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2948, CVE-2019-2950)

  - mysql: Client programs unspecified vulnerability (CPU Oct 2019) (CVE-2019-2969)

  - mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-3003)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
121228	MySQL 5.7.x < 5.7.25 Multiple Vulnerabilities (Jan 2019 CPU)	Nessus	Databases	2019/1/17	2022/10/5	high
122557	Fedora 28 : community-mysql (2019-21b76d179e)	Nessus	Fedora Local Security Checks	2019/3/4	2024/6/18	high
121346	Ubuntu 16.04 LTS / 18.04 LTS : MySQL vulnerabilities (USN-3867-1)	Nessus	Ubuntu Local Security Checks	2019/1/24	2024/8/27	high
127983	Oracle Linux 8 : mysql:8.0 (ELSA-2019-2511)	Nessus	Oracle Linux Local Security Checks	2019/8/20	2024/10/22	high
145612	CentOS 8 : mysql:8.0 (CESA-2019:2511)	Nessus	CentOS Local Security Checks	2021/1/29	2023/2/8	high

检测

插件搜索

high

high

high

high

high