This mariadb version update to 10.0.29 fixes the following issues :

  - CVE-2017-3318: unspecified vulnerability affecting Error     Handling (bsc#1020896)

  - CVE-2017-3317: unspecified vulnerability affecting     Logging (bsc#1020894)

  - CVE-2017-3312: insecure error log file handling in     mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)

  - CVE-2017-3291: unrestricted mysqld_safe's ledir     (bsc#1020884)

  - CVE-2017-3265: unsafe chmod/chown use in init script     (bsc#1020885)

  - CVE-2017-3258: unspecified vulnerability in the DDL     component (bsc#1020875)

  - CVE-2017-3257: unspecified vulnerability affecting     InnoDB (bsc#1020878)

  - CVE-2017-3244: unspecified vulnerability affecing the     DML component (bsc#1020877)

  - CVE-2017-3243: unspecified vulnerability affecting the     Charsets component (bsc#1020891)

  - CVE-2017-3238: unspecified vulnerability affecting the     Optimizer component (bsc#1020882)

  - CVE-2016-6664: Root Privilege Escalation (bsc#1008253)

  - Applications using the client library for MySQL     (libmysqlclient.so) had a use-after-free issue that     could cause the applications to crash (bsc#1022428)

  - notable changes :

  - XtraDB updated to 5.6.34-79.1

  - TokuDB updated to 5.6.34-79.1

  - Innodb updated to 5.6.35

  - Performance Schema updated to 5.6.35 Release notes and     changelog :

  - https://kb.askmonty.org/en/mariadb-10029-release-notes

  - https://kb.askmonty.org/en/mariadb-10029-changelog

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201702-18 (MariaDB: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MariaDB. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could possibly escalate privileges, gain access to critical       data or complete access to all MariaDB Server accessible data, or cause a       Denial of Service condition via unspecified vectors.
  Workaround :

    There is no known workaround at this time.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3174-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to     fix these issues.

    MySQL has been updated to 5.5.54 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 16.04 LTS and Ubuntu     16.10 have been updated to MySQL 5.7.17.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-54.html     http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html     http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
97063	SUSE SLES12 Security Update : mariadb (SUSE-SU-2017:0411-1)	Nessus	SuSE Local Security Checks	2017/2/8	2026/1/1	high
97261	GLSA-201702-18 : MariaDB: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/2/21	2025/12/31	high
96656	Ubuntu 14.04 LTS / 16.04 LTS : MySQL vulnerabilities (USN-3174-1)	Nessus	Ubuntu Local Security Checks	2017/1/20	2024/8/27	medium

检测

插件搜索

high

high

medium