According to the versions of the mariadb packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The mariadb-libs package provides the essential shared     libraries for any MariaDB/MySQL client program or     interface. You will need to install this package to use     any other MariaDB package or any clients that need to     connect to a MariaDB/MySQL server. MariaDB is a     community developed branch of MySQL.Security     Fix(es):Vulnerability in the MySQL Client product of     Oracle MySQL (component: C API). Supported versions     that are affected are 5.6.46 and prior, 5.7.28 and     prior and 8.0.18 and prior. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise     MySQL Client. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of MySQL     Client. (CVE-2020-2574)Vulnerability in the MySQL     Server product of Oracle MySQL (component: Server:
    Optimizer). Supported versions that are affected are     5.6.45 and prior, 5.7.27 and prior and 8.0.17 and     prior. Easily exploitable vulnerability allows low     privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS     3.0 Base Score 6.5 (Availability impacts).
    (CVE-2019-2974)Vulnerability in the MySQL Server     component of Oracle MySQL (subcomponent: Server:
    Optimizer). Supported versions that are affected are     5.6.42 and prior, 5.7.24 and prior and 8.0.13 and     prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS     3.0 Base Score 4.9 (Availability impacts).
    (CVE-2019-2481)Vulnerability in the MySQL Server     component of Oracle MySQL (subcomponent: Server:
    Parser). Supported versions that are affected are     5.6.42 and prior, 5.7.24 and prior and 8.0.13 and     prior. Easily exploitable vulnerability allows low     privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS     3.0 Base Score 6.5 (Availability impacts).
    (CVE-2019-2455)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported     versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2455)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4497:03 advisory.

    * mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436,     CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635,     CVE-2019-2755)
      * mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481,     CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625,     CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693,     CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803,     CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)
      * mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455,     CVE-2019-2805)
      * mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)
      * mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486,     CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627,     CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)
      * mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537,     CVE-2019-2626, CVE-2019-2644)
      * mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580,     CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798,     CVE-2019-2879, CVE-2019-2814)
      * mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)
      * mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)
      * mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623,     CVE-2019-2683, CVE-2019-2752)
      * mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)
      * mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)
      * mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)
      * mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)
      * mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)
      * mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)
      * mysql: Server: XML unspecified vulnerability (CVE-2019-2740)
      * mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)
      * mysql: Server: DML unspecified vulnerability (CVE-2019-2784)
      * mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)
      * mysql: Client programs unspecified vulnerability (CVE-2019-2797)
      * mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)
      * mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)
      * mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2019_2511 advisory.

    * mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436,     CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635,     CVE-2019-2755)

    * mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481,     CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625,     CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693,     CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803,     CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

    * mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

    * mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

    * mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532,     CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739,     CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

    * mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537,     CVE-2019-2626, CVE-2019-2644)

    * mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580,     CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798,     CVE-2019-2879, CVE-2019-2814)

    * mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

    * mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

    * mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623,     CVE-2019-2683, CVE-2019-2752)

    * mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

    * mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

    * mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

    * mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

    * mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

    * mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

    * mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

    * mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

    * mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

    * mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

    * mysql: Client programs unspecified vulnerability (CVE-2019-2797)

    * mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

    * mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

    * mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL running on the remote host is 5.6.x prior to 5.6.43. It is, therefore, affected by multiple vulnerabilities, including three of the top vulnerabilities below, as noted in the January 2019 Critical Patch Update advisory:

  - An unspecified vulnerability in MySQL in the     'Server: Replication' subcomponent could allow an low     privileged attacker with network access via multiple     protocols to gain unauthorized access critical data or     complete access to all MySQL server data. (CVE-2019-2534)

  - An unspecified vulnerability in MySQL in the     'Server: Optimizer' subcomponent could allow an low     privileged attacker with network access via multiple     protocols to perform a denial of service attack.
    (CVE-2019-2529)

  - An unspecified vulnerability in MySQL in the     'Server: PS' subcomponent could allow an low     privileged attacker with network access via multiple     protocols to perform a denial of service attack.
    (CVE-2019-2482)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 10.1.33. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.33 advisory.

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions     that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of     MySQL Server accessible data. (CVE-2018-2787)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported     versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to     exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server     executes to compromise MySQL Server. Successful attacks require human interaction from a person other than     the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional     products. Successful attacks of this vulnerability can result in takeover of MySQL Server. (CVE-2018-2755)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported     versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to     exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to     compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2018-2761)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions     that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2018-2766)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption).
    Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior.
    Difficult to exploit vulnerability allows low privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized     read access to a subset of MySQL Server accessible data. (CVE-2018-2767)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
144721	EulerOS Virtualization for ARM 64 3.0.2.0 : mariadb (EulerOS-SA-2021-1055)	Nessus	Huawei Local Security Checks	2021/1/5	2022/5/11	medium
222876	Linux Distros Unpatched Vulnerability : CVE-2019-2455	Nessus	Misc.	2025/3/4	2025/8/18	medium
236417	Alibaba Cloud Linux 3 : 0107: mysql:8.0 (ALINUX3-SA-2022:0107)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
293802	MiracleLinux 7 : rh-mysql80-mysql-8.0.17-1.el7 (AXSA:2020-4497:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
353954	Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-ipadic / etc Multiple Vulnerabilities (crlsa-2019_2511)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
121227	MySQL 5.6.x < 5.6.43 Multiple Vulnerabilities (Jan 2019 CPU)	Nessus	Databases	2019/1/17	2022/10/5	high
167883	MariaDB 10.1.0 < 10.1.33 Multiple Vulnerabilities	Nessus	Databases	2022/11/18	2026/1/29	high

检测

插件搜索

medium

medium

high

high

high

high

high