The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL     Server. (CVE-2019-2963)

Note that Nessus relies on the presence of the package as reported by the vendor.

**MySQL 8.0.18**

Release notes :

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html

CVEs fixed :

CVE-2019-2911 CVE-2019-2914 CVE-2019-2938 CVE-2019-2946 CVE-2019-2957 CVE-2019-2960 CVE-2019-2963 CVE-2019-2966 CVE-2019-2967 CVE-2019-2968 CVE-2019-2974 CVE-2019-2982 CVE-2019-2991 CVE-2019-2993 CVE-2019-2997 CVE-2019-2998 CVE-2019-3004 CVE-2019-3009 CVE-2019-3011 CVE-2019-3018 https://bugzilla.redhat.com/show_bug.cgi?id=1768175 https://www.oracle.com/security-alerts/cpuoct2019.html

Maintainer notes :

linking with GOLD disabled on armv7hl, because of https://bugs.mysql.com/bug.php?id=96698

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3732 advisory.

    mysql     [8.0.21-1]
    - Rebase to 8.0.21
    - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0
    - Check that we have correct versions in bundled(*) Provides
    - Remove re2 bundled dependency

    [8.0.20-1]
    - Rebase to 8.0.20

    [8.0.19-2]
    - Specify all perl dependencies

    [8.0.19-1]
    - Rebase to 8.0.19

    [8.0.18-1]
    - Rebase to 8.0.18
    - Add libzstd-devel dependencies
    - Include patch to build against protobuf 3.11

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
252743	Linux Distros Unpatched Vulnerability : CVE-2019-2963	Nessus	Misc.	2025/8/20	2025/8/20	medium
130783	Fedora 30 : community-mysql (2019-48a0a07033)	Nessus	Fedora Local Security Checks	2019/11/12	2019/12/12	medium
140614	Oracle Linux 8 : mysql:8.0 (ELSA-2020-3732)	Nessus	Oracle Linux Local Security Checks	2020/9/17	2024/7/9	high
235953	Alibaba Cloud Linux 3 : 0097: mysql:8.0 (ALINUX3-SA-2021:0097)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/15	high

检测

插件搜索

medium

medium

high

high