The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2192 advisory.

    - Rebase to 5.5.56       That release also fixes the following security issues:
      CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238 CVE-2017-3243       CVE-2017-3244 CVE-2017-3258 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318       CVE-2017-3291 CVE-2017-3302 CVE-2016-5483/CVE-2017-3600 CVE-2017-3308       CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464       Resolves: #1458933       New deps required by upstream: checkpolicy and policycoreutils-python       License text removed by upstream: COPYING.LESSER       Do not ignore test-suite failure       Downstream script mariadb-prepare-db-dir fixed for CVE-2017-3265       Resolves: #1458940

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This mysql version update to 5.5.54 fixes the following issues :

  - CVE-2017-3318: Unspecified vulnerability affecting Error     Handling (bsc#1020896)

  - CVE-2017-3317: Unspecified vulnerability affecting     Logging (bsc#1020894)

  - CVE-2017-3313: Unspecified vulnerability affecting the     MyISAM component (bsc#1020890)

  - CVE-2017-3312: Insecure error log file handling in     mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)

  - CVE-2017-3291: Unrestricted mysqld_safe's ledir     (bsc#1020884)

  - CVE-2017-3265: Unsafe chmod/chown use in init script     (bsc#1020885)

  - CVE-2017-3258: Unspecified vulnerability in the DDL     component (bsc#1020875)

  - CVE-2017-3244: Unspecified vulnerability affecing the     DML component (bsc#1020877)

  - CVE-2017-3243: Unspecified vulnerability affecting the     Charsets component (bsc#1020891)

  - CVE-2017-3238: Unspecified vulnerability affecting the     Optimizer component (bsc#1020882)

  - Applications using the client library for MySQL     (libmysqlclient.so) had a use-after-free issue that     could cause the applications to crash (bsc#1022428)     Release Notes:
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-     54.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This mariadb version update to 10.0.29 fixes the following issues :

  - CVE-2017-3318: unspecified vulnerability affecting Error     Handling (bsc#1020896)

  - CVE-2017-3317: unspecified vulnerability affecting     Logging (bsc#1020894)

  - CVE-2017-3312: insecure error log file handling in     mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)

  - CVE-2017-3291: unrestricted mysqld_safe's ledir     (bsc#1020884)

  - CVE-2017-3265: unsafe chmod/chown use in init script     (bsc#1020885)

  - CVE-2017-3258: unspecified vulnerability in the DDL     component (bsc#1020875)

  - CVE-2017-3257: unspecified vulnerability affecting     InnoDB (bsc#1020878)

  - CVE-2017-3244: unspecified vulnerability affecing the     DML component (bsc#1020877)

  - CVE-2017-3243: unspecified vulnerability affecting the     Charsets component (bsc#1020891)

  - CVE-2017-3238: unspecified vulnerability affecting the     Optimizer component (bsc#1020882)

  - CVE-2016-6664: Root Privilege Escalation (bsc#1008253)

  - Applications using the client library for MySQL     (libmysqlclient.so) had a use-after-free issue that     could cause the applications to crash (bsc#1022428)

  - notable changes :

  - XtraDB updated to 5.6.34-79.1

  - TokuDB updated to 5.6.34-79.1

  - Innodb updated to 5.6.35

  - Performance Schema updated to 5.6.35 Release notes and     changelog :

  - https://kb.askmonty.org/en/mariadb-10029-release-notes

  - https://kb.askmonty.org/en/mariadb-10029-changelog

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201702-18 (MariaDB: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MariaDB. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could possibly escalate privileges, gain access to critical       data or complete access to all MariaDB Server accessible data, or cause a       Denial of Service condition via unspecified vectors.
  Workaround :

    There is no known workaround at this time.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0461 advisory.

    This advisory aggregates security fixes for the mysql SRPM in CIQ LTS 9.2. It addresses 187 CVEs:
    CVE-2019-2528, CVE-2017-3462, CVE-2018-3283, CVE-2018-2759, CVE-2019-2503, and 182 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
102299	Oracle Linux 7 : mariadb (ELSA-2017-2192)	Nessus	Oracle Linux Local Security Checks	2017/8/9	2025/12/2	high
97046	SUSE SLES11 Security Update : mysql (SUSE-SU-2017:0408-1)	Nessus	SuSE Local Security Checks	2017/2/7	2026/1/1	high
97063	SUSE SLES12 Security Update : mariadb (SUSE-SU-2017:0411-1)	Nessus	SuSE Local Security Checks	2017/2/8	2026/1/1	high
97261	GLSA-201702-18 : MariaDB: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/2/21	2025/12/31	high
353739	Rocky Linux 9.2 [CIQ] Security Update: mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0461)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/13	critical

検出

プラグインの検索

high

high

high

high

critical