Oracle reports :

This Critical Patch Update contains 49 new security patches for Oracle MySQL. 10 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials. The highest CVSS v3.1 Base Score of vulnerabilities affecting Oracle MySQL is 9.8.

MariaDB is affected by CVE-2021-2166 and CVE-2021-2154 only

This update for krb5 fixes the following security issue :

CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x     before 1.18.3 allows unbounded recursion via an     ASN.1-encoded Kerberos message because the     lib/krb5/asn.1/asn1_encode.c support for BER indefinite     lengths lacks a recursion limit.(CVE-2020-28196)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the krb5 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x     before 1.18.3 allows unbounded recursion via an     ASN.1-encoded Kerberos message because the     lib/krb5/asn.1/asn1_encode.c support for BER indefinite     lengths lacks a recursion limit.(CVE-2020-28196)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x     before 1.18.3 allows unbounded recursion via an     ASN.1-encoded Kerberos message because the     lib/krb5/asn.1/asn1_encode.c support for BER indefinite     lengths lacks a recursion limit.(CVE-2020-28196)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
148869	FreeBSD : MySQL -- Multiple vulnerabilities (56ba4513-a1be-11eb-9072-d4c9ef517024)	Nessus	FreeBSD Local Security Checks	2021/4/21	2024/11/29	medium
143831	SUSE SLED15 / SLES15 Security Update : krb5 (SUSE-SU-2020:3377-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	high
146651	EulerOS 2.0 SP2 : krb5 (EulerOS-SA-2021-1312)	Nessus	Huawei Local Security Checks	2021/2/22	2024/1/19	high
147549	EulerOS Virtualization 3.0.2.6 : krb5 (EulerOS-SA-2021-1414)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/10	high
147609	EulerOS Virtualization 3.0.6.6 : krb5 (EulerOS-SA-2021-1487)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/10	high

检测

插件搜索

medium

high

high

high

high