The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:2511 advisory.

    * mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436,     CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635,     CVE-2019-2755)

    * mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481,     CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625,     CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693,     CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803,     CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

    * mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

    * mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

    * mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532,     CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739,     CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

    * mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537,     CVE-2019-2626, CVE-2019-2644)

    * mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580,     CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798,     CVE-2019-2879, CVE-2019-2814)

    * mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

    * mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

    * mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623,     CVE-2019-2683, CVE-2019-2752)

    * mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

    * mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

    * mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

    * mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

    * mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

    * mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

    * mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

    * mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

    * mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

    * mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

    * mysql: Client programs unspecified vulnerability (CVE-2019-2797)

    * mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

    * mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

    * mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
(CVE-2019-2739)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior.
Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). (CVE-2019-2819)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). (CVE-2019-2740)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2511 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld,     and many client programs.

    The following packages have been upgraded to a later upstream version: mysql (8.0.17).

    Security Fix(es):

    * mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436,     CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635,     CVE-2019-2755)

    * mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481,     CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625,     CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693,     CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803,     CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

    * mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

    * mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

    * mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532,     CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739,     CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

    * mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537,     CVE-2019-2626, CVE-2019-2644)

    * mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580,     CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798,     CVE-2019-2879, CVE-2019-2814)

    * mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

    * mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

    * mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623,     CVE-2019-2683, CVE-2019-2752)

    * mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

    * mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

    * mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

    * mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

    * mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

    * mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

    * mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

    * mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

    * mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

    * mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

    * mysql: Client programs unspecified vulnerability (CVE-2019-2797)

    * mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

    * mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

    * mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2019_2511 advisory.

    * mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436,     CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635,     CVE-2019-2755)

    * mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481,     CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625,     CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693,     CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803,     CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

    * mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

    * mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

    * mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532,     CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739,     CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

    * mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537,     CVE-2019-2626, CVE-2019-2644)

    * mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580,     CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798,     CVE-2019-2879, CVE-2019-2814)

    * mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

    * mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

    * mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623,     CVE-2019-2683, CVE-2019-2752)

    * mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

    * mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

    * mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

    * mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

    * mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

    * mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

    * mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

    * mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

    * mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

    * mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

    * mysql: Client programs unspecified vulnerability (CVE-2019-2797)

    * mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

    * mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

    * mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL running on the remote host is 5.7.x prior to 5.7.27. It is, therefore, affected by multiple vulnerabilities, including three of the top vulnerabilities below, as noted in the July 2019 Critical Patch Update advisory:

  - A stack-based buffer overflow vulnerability in the     'Server: Packaging (cURL)' subcomponent could allow an     unauthenticated attacker to gain complete control of an     affected instance of MySQL Server. (CVE-2019-3822)

  - A vulnerability in the 'Server: Parser' subcomponent.
    This is an easily exploitable vulnerability that allows     a low privileged attacker with network access via     multiple protocols to compromise the server. Successful     attacks involving this vulnerability can result in the     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS). (CVE-2019-2805)

  - A vulnerability in the 'Server: XML' subcomponent. This     is an easily exploitable vulnerability that allows a     low privileged attacker with network access via multiple     protocols to compromise a server.Successful attacks     involving this vulnerability can result in the     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS).
    (CVE-2019-2740)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4070-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to     fix these issues.

    Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 19.04 have been updated to MySQL 5.7.27.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:
    http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-27.html     https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the mysql package has been released.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
184908	Rocky Linux 8 : mysql:8.0 (RLSA-2019:2511)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2024/7/10	high
129566	Amazon Linux AMI : mysql56 (ALAS-2019-1296)	Nessus	Amazon Linux Local Security Checks	2019/10/4	2019/12/23	medium
236417	Alibaba Cloud Linux 3 : 0107: mysql:8.0 (ALINUX3-SA-2022:0107)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
127991	RHEL 8 : mysql:8.0 (RHSA-2019:2511)	Nessus	Red Hat Local Security Checks	2019/8/20	2024/11/7	high
353954	Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-ipadic / etc Multiple Vulnerabilities (crlsa-2019_2511)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
126783	MySQL 5.7.x < 5.7.27 Multiple Vulnerabilities (Jul 2019 CPU)	Nessus	Databases	2019/7/18	2024/5/9	critical
127041	Ubuntu 16.04 LTS / 18.04 LTS : MySQL vulnerabilities (USN-4070-1)	Nessus	Ubuntu Local Security Checks	2019/7/25	2024/8/28	medium
129103	Photon OS 3.0: Mysql PHSA-2019-3.0-0026	Nessus	PhotonOS Local Security Checks	2019/9/23	2024/7/23	high

検出

プラグインの検索

high

medium

high

high

high

critical

medium

high