The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4127:01 advisory.

    * mysql: MyISAM unspecified vulnerability (CPU Jul 2018) (CVE-2018-3058)
      * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018) (CVE-2018-3063)
      * mysql: Client programs unspecified vulnerability (CPU Jul 2018) (CVE-2018-3081)
      * mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018) (CVE-2018-3282)
      * mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019) (CVE-2019-2503)
      * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) (CVE-2019-2529)
      * mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)
      * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)
      * mysql: Server: Options unspecified vulnerability (CPU Jul 2018) (CVE-2018-3066)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2327 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    The following packages have been upgraded to a later upstream version: mariadb (5.5.64). (BZ#1610986,     BZ#1664043)

    Security Fix(es):

    * mysql: MyISAM unspecified vulnerability (CPU Jul 2018) (CVE-2018-3058)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018) (CVE-2018-3063)

    * mysql: Client programs unspecified vulnerability (CPU Jul 2018) (CVE-2018-3081)

    * mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018) (CVE-2018-3282)

    * mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019) (CVE-2019-2503)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) (CVE-2019-2529)

    * mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)

    * mysql: Server: Options unspecified vulnerability (CPU Jul 2018) (CVE-2018-3066)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - mysql: MyISAM unspecified vulnerability (CPU Jul 2018)     (CVE-2018-3058)

  - mysql: Server: Security: Privileges unspecified     vulnerability (CPU Jul 2018) (CVE-2018-3063)

  - mysql: Client programs unspecified vulnerability (CPU     Jul 2018) (CVE-2018-3081)

  - mysql: Server: Storage Engines unspecified vulnerability     (CPU Oct 2018) (CVE-2018-3282)

  - mysql: Server: Connection Handling unspecified     vulnerability (CPU Jan 2019) (CVE-2019-2503)

  - mysql: Server: Optimizer unspecified vulnerability (CPU     Jan 2019) (CVE-2019-2529)

  - mysql: Server: Replication unspecified vulnerability     (CPU Apr 2019) (CVE-2019-2614)

  - mysql: Server: Security: Privileges unspecified     vulnerability (CPU Apr 2019) (CVE-2019-2627)

  - mysql: Server: Options unspecified vulnerability (CPU     Jul 2018) (CVE-2018-3066)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has mariadb packages installed that are affected by multiple vulnerabilities:

  - Vulnerability in the MySQL Server component of Oracle     MySQL (subcomponent: MyISAM). Supported versions that     are affected are 5.5.60 and prior, 5.6.40 and prior and     5.7.22 and prior. Easily exploitable vulnerability     allows low privileged attacker with network access via     multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     MySQL Server accessible data. CVSS 3.0 Base Score 4.3     (Integrity impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
    (CVE-2018-3058)

  - Vulnerability in the MySQL Server component of Oracle     MySQL (subcomponent: Server: Security: Privileges).
    Supported versions that are affected are 5.5.60 and     prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful attacks     of this vulnerability can result in unauthorized ability     to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.0 Base Score 4.9     (Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2018-3063)

  - Vulnerability in the MySQL Server component of Oracle     MySQL (subcomponent: Server: Storage Engines). Supported     versions that are affected are 5.5.61 and prior, 5.6.41     and prior, 5.7.23 and prior and 8.0.12 and prior. Easily     exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to     compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.0 Base Score 4.9     (Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2018-3282)

  - Vulnerability in the MySQL Client component of Oracle     MySQL (subcomponent: Client programs). Supported     versions that are affected are 5.5.60 and prior, 5.6.40     and prior, 5.7.22 and prior and 8.0.11 and prior.
    Difficult to exploit vulnerability allows high     privileged attacker with network access via multiple     protocols to compromise MySQL Client. Successful attacks     of this vulnerability can result in unauthorized ability     to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Client as well as unauthorized update,     insert or delete access to some of MySQL Client     accessible data. CVSS 3.0 Base Score 5.0 (Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).
    (CVE-2018-3081)

  - Vulnerability in the MySQL Server component of Oracle     MySQL (subcomponent: Server: Options). Supported     versions that are affected are 5.5.60 and prior, 5.6.40     and prior and 5.7.22 and prior. Difficult to exploit     vulnerability allows high privileged attacker with     network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability     can result in unauthorized update, insert or delete     access to some of MySQL Server accessible data as well     as unauthorized read access to a subset of MySQL Server     accessible data. CVSS 3.0 Base Score 3.3     (Confidentiality and Integrity impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N).
    (CVE-2018-3066)

  - Vulnerability in the MySQL Server component of Oracle     MySQL (subcomponent: Server: Connection Handling).
    Supported versions that are affected are 5.6.42 and     prior, 5.7.24 and prior and 8.0.13 and prior. Difficult     to exploit vulnerability allows low privileged attacker     with access to the physical communication segment     attached to the hardware where the MySQL Server executes     to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized access to     critical data or complete access to all MySQL Server     accessible data and unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL     Server. CVSS 3.0 Base Score 6.4 (Confidentiality and     Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H).
    (CVE-2019-2503)

  - Vulnerability in the MySQL Server component of Oracle     MySQL (subcomponent: Server: Replication). Supported     versions that are affected are 5.6.43 and prior, 5.7.25     and prior and 8.0.15 and prior. Difficult to exploit     vulnerability allows high privileged attacker with     network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of MySQL     Server. CVSS 3.0 Base Score 4.4 (Availability impacts).
    CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2019-2614)

  - Vulnerability in the MySQL Server component of Oracle     MySQL (subcomponent: Server: Security: Privileges).
    Supported versions that are affected are 5.6.43 and     prior, 5.7.25 and prior and 8.0.15 and prior. Easily     exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to     compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.0 Base Score 4.9     (Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2019-2627)

  - Vulnerability in the MySQL Server component of Oracle     MySQL (subcomponent: Server: Optimizer). Supported     versions that are affected are 5.6.42 and prior, 5.7.24     and prior and 8.0.13 and prior. Easily exploitable     vulnerability allows low privileged attacker with     network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of MySQL     Server. CVSS 3.0 Base Score 6.5 (Availability impacts).
    CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2019-2529)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0104 advisory.

    This advisory aggregates security fixes for the mariadb SRPM in CIQ LTS 8.6. It addresses 53 CVEs:
    CVE-2018-2771, CVE-2014-0401, CVE-2017-3456, CVE-2018-2781, CVE-2018-2761, and 48 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
289550	MiracleLinux 7 : mariadb-5.5.64-1.el7 (AXSA:2019-4127:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	medium
127712	RHEL 7 : mariadb (RHSA-2019:2327)	Nessus	Red Hat Local Security Checks	2019/8/12	2024/11/6	medium
128240	Scientific Linux Security Update : mariadb on SL7.x x86_64 (20190806)	Nessus	Scientific Linux Local Security Checks	2019/8/27	2024/5/1	medium
129910	NewStart CGSL CORE 5.04 / MAIN 5.04 : mariadb Multiple Vulnerabilities (NS-SA-2019-0197)	Nessus	NewStart CGSL Local Security Checks	2019/10/15	2022/5/18	medium
351497	Rocky Linux 8.6 [CIQ] Security Update: mariadb / mariadb-backup / mariadb-backup-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0104)	Nessus	Rocky Linux Local Security Checks	2026/9/30	2026/10/11	critical

検出

プラグインの検索

medium

medium

medium

medium

critical