The version of MySQL running on the remote host is 5.7.x prior to 5.7.36. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the October 2021 Critical Patch Update advisory:

  - A vulnerability in the OpenSSL component that can result in a takeover of the MySQL server.
    (CVE-2021-3711)

  - An easily exploitable vulnerability in the InnoDB component that allows a high privileged attacker to     affect the integrity and availability of the MySQL Server. (CVE-2021-35604)

  - An easily exploitable vulnerability in the cURL component that allows an unauthenticated, remote attacker     to affect the availability of the MySQL Server. (CVE-2021-22926)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986143 advisory.

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).
    Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable     vulnerability allows high privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or     modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9     (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the mysql package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
154259	MySQL 5.7.x < 5.7.36 Multiple Vulnerabilities (Oct 2021 CPU)	Nessus	Databases	2021/10/20	2023/11/28	critical
236677	Alibaba Cloud Linux 3 : 0081: mysql:8.0 (ALINUX3-SA-2023:0081)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
268677	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-986143)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/7	medium
203488	Photon OS 4.0: Mysql PHSA-2021-4.0-0119	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	high

检测

插件搜索

critical

high

medium

high