| Beschreibung: | Summary:
The remote host is missing an update for the 'mariadb'
package(s) announced via the referenced advisory.
Vulnerability Insight:
mariadb was updated to version 10.0.16 to fix 40 security issues.
These security issues were fixed:
- CVE-2015-0411: Unspecified vulnerability in Oracle MySQL Server 5.5.40
and earlier, and 5.6.21 and earlier, allowed remote attackers to affect
confidentiality, integrity, and availability via unknown vectors related
to Server : Security : Encryption (bnc#915911).
- CVE-2015-0382: Unspecified vulnerability in Oracle MySQL Server 5.5.40
and earlier and 5.6.21 and earlier allowed remote attackers to affect
availability via unknown vectors related to Server : Replication, a
different vulnerability than CVE-2015-0381 (bnc#915911).
- CVE-2015-0381: Unspecified vulnerability in Oracle MySQL Server 5.5.40
and earlier and 5.6.21 and earlier allowed remote attackers to affect
availability via unknown vectors related to Server : Replication, a
different vulnerability than CVE-2015-0382 (bnc#915911).
- CVE-2015-0432: Unspecified vulnerability in Oracle MySQL Server 5.5.40
and earlier allowed remote authenticated users to affect availability
via vectors related to Server : InnoDB : DDL : Foreign Key (bnc#915911).
- CVE-2014-6568: Unspecified vulnerability in Oracle MySQL Server 5.5.40
and earlier, and 5.6.21 and earlier, allowed remote authenticated users
to affect availability via vectors related to Server : InnoDB : DML
(bnc#915911).
- CVE-2015-0374: Unspecified vulnerability in Oracle MySQL Server 5.5.40
and earlier and 5.6.21 and earlier allowed remote authenticated users to
affect confidentiality via unknown vectors related to Server : Security
: Privileges : Foreign Key (bnc#915911).
- CVE-2014-6507: Unspecified vulnerability in Oracle MySQL Server 5.5.39
and earlier, and 5.6.20 and earlier, allowed remote authenticated users
to affect confidentiality, integrity, and availability via vectors
related to SERVER:DML (bnc#915912).
- CVE-2014-6491: Unspecified vulnerability in Oracle MySQL Server 5.5.39
and earlier and 5.6.20 and earlier allowed remote attackers to affect
confidentiality, integrity, and availability via vectors related to
SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500
(bnc#915912).
- CVE-2014-6500: Unspecified vulnerability in Oracle MySQL Server 5.5.39
and earlier, and 5.6.20 and earlier, allowed remote attackers to affect
confidentiality, integrity, and availability via vectors related to
SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491
(bnc#915912).
- CVE-2014-6469: Unspecified vulnerability in Oracle MySQL Server 5.5.39
...
Description truncated, please see the referenced URL(s) for more information.
Affected Software/OS:
mariadb on SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Desktop 12
Solution:
Please install the updated package(s).
CVSS Score:
7.5
CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
