Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
slackwareSlackware Linux ProjectSSA-2018-130-01
HistoryMay 10, 2018 - 9:14 p.m.

[slackware-security] mariadb

2018-05-1021:14:32
Slackware Linux Project
www.slackware.com
57

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

7.7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

70.6%

JSON

New mariadb packages are available for Slackware 14.1 and 14.2 to
fix security issues.

Here are the details from the Slackware 14.2 ChangeLog:

patches/packages/mariadb-10.0.35-i586-1_slack14.2.txz: Upgraded.
This update fixes bugs and security issues.
For more information, see:
https://vulners.com/cve/CVE-2018-2782
https://vulners.com/cve/CVE-2018-2784
https://vulners.com/cve/CVE-2018-2787
https://vulners.com/cve/CVE-2018-2766
https://vulners.com/cve/CVE-2018-2755
https://vulners.com/cve/CVE-2018-2819
https://vulners.com/cve/CVE-2018-2817
https://vulners.com/cve/CVE-2018-2761
https://vulners.com/cve/CVE-2018-2781
https://vulners.com/cve/CVE-2018-2771
https://vulners.com/cve/CVE-2018-2813
(* Security fix *)

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/mariadb-5.5.60-i486-1_slack14.1.txz

Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/mariadb-5.5.60-x86_64-1_slack14.1.txz

Updated package for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/mariadb-10.0.35-i586-1_slack14.2.txz

Updated package for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/mariadb-10.0.35-x86_64-1_slack14.2.txz

MD5 signatures:

Slackware 14.1 package:
3b71d2f3d141f91c67a174eb02f3aef2 mariadb-5.5.60-i486-1_slack14.1.txz

Slackware x86_64 14.1 package:
8cd272a56bcad890e7c961d511f70fc6 mariadb-5.5.60-x86_64-1_slack14.1.txz

Slackware 14.2 package:
e7d91844d97f3d02e7b1719ed4023e97 mariadb-10.0.35-i586-1_slack14.2.txz

Slackware x86_64 14.2 package:
1a9d3c18b1b3eb0f48c5b700faf7352e mariadb-10.0.35-x86_64-1_slack14.2.txz

Installation instructions:

Upgrade the package as root:
> upgradepkg mariadb-10.0.35-i586-1_slack14.2.txz

Then, restart the database server:
> sh /etc/rc.d/rc.mysqld restart

Related

mageia 2
openvas 34
suse 2
nessus 50
amazon 4
debian 6
osv 12
redhat 3
ubuntu 3
fedora 9
altlinux 1
f5 3
rosalinux 1
gentoo 1
freebsd 1
ibm 3
oraclelinux 1
photon 2
debiancve 7
alpinelinux 7
nvd 7
centos 1
prion 4
ubuntucve 8
veracode 5
mariadbunix 6
cvelist 5
cve 6
redhatcve 5
mageia
mageia
Updated mariadb packages fix security vulnerabilities
2018-05-29 22:41:14
Updated mariadb packages fix security vulnerabilities
2018-06-04 18:11:47
openvas
openvas
Slackware: Security Advisory (SSA:2018-130-01)
2022-04-21 00:00:00
Mageia: Security Advisory (MGASA-2018-0259)
2022-01-28 00:00:00
openSUSE: Security Advisory for mariadb (openSUSE-SU-2018:1800-1)
2018-06-23 00:00:00
suse
suse
Security update for mariadb (important)
2018-06-23 03:12:07
Security update for mariadb (moderate)
2018-06-08 00:11:54
nessus
nessus
SUSE SLES12 Security Update : mariadb (SUSE-SU-2018:1781-2)
2018-10-22 00:00:00
SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2018:1781-1)
2018-06-25 00:00:00
Slackware 14.1 / 14.2 : mariadb (SSA:2018-130-01)
2018-05-11 00:00:00
amazon
amazon
Medium: mysql56
2018-05-25 18:26:00
Medium: mysql55
2018-05-25 18:26:00
Medium: mysql57
2018-05-25 18:22:00
debian
debian
[SECURITY] [DSA 4176-1] mysql-5.5 security update
2018-04-20 08:34:15
[SECURITY] [DSA 4176-1] mysql-5.5 security update
2018-04-20 08:34:15
[SECURITY] [DLA 1355-1] mysql-5.5 security update
2018-04-19 17:29:05
osv
osv
mysql-5.5 - security update
2018-04-20 00:00:00
mysql-5.5 - security update
2018-04-19 00:00:00
mariadb-10.0 - security update
2018-06-29 00:00:00
redhat
redhat
(RHSA-2018:1254) Moderate: rh-mysql56-mysql security update
2018-04-26 06:59:23
(RHSA-2018:2439) Moderate: mariadb security and bug fix update
2018-08-16 12:46:48
(RHSA-2018:2729) Moderate: Red Hat Enterprise Linux OpenStack Platform security update
2018-09-19 17:36:53
ubuntu
ubuntu
MySQL vulnerabilities
2018-04-25 00:00:00
MySQL vulnerabilities
2018-04-30 00:00:00
MySQL vulnerabilities
2018-04-23 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: mariadb-10.2.15-2.fc28
2018-06-20 01:57:32
[SECURITY] Fedora 27 Update: mariadb-10.2.15-2.fc27
2018-06-24 20:10:42
[SECURITY] Fedora 26 Update: mariadb-10.1.33-1.fc26
2018-05-22 14:31:34
altlinux
altlinux
Security fix for the ALT Linux 8 package mariadb version 10.1.33-alt1
2018-05-23 00:00:00
f5
f5
K32702281 : Oracle MySQL vulnerabilities CVE-2018-2782, CVE-2018-2784, CVE-2018-2786, and CVE-2018-2787
2018-04-24 00:00:00
K03551138 : MySQL vulnerabilities CVE-2018-2817, CVE-2018-2818, CVE-2018-2819, CVE-2018-2839, and CVE-2018-2846
2018-04-24 00:00:00
K02212309 : MySQL vulnerabilities CVE-2018-2755, CVE-2018-2758, CVE-2018-2759, CVE-2018-2761, and CVE-2018-2762
2018-04-24 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2250
2023-10-21 13:39:47
gentoo
gentoo
MariaDB, MySQL: Multiple vulnerabilities
2019-08-18 00:00:00
freebsd
freebsd
MySQL -- multiple vulnerabilities
2018-04-17 00:00:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities has been identified in Oracle MySQL, which is a supported topology database of IBM Tivoli Network Manager IP Edition.
2023-06-28 22:03:38
Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM
2018-12-17 14:30:02
Security Bulletin: A security vulnerability has been identified in Oracle MySQL, which is a supported topology database of IBM Tivoli Network Manager IP Edition (CVE-2018-2755).
2023-06-28 22:03:38
oraclelinux
oraclelinux
mariadb security and bug fix update
2018-08-16 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2018-0040
2018-04-30 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0040
2018-04-30 00:00:00
debiancve
debiancve
CVE-2018-2782
2018-04-19 02:29:00
CVE-2018-2771
2018-04-19 02:29:00
CVE-2018-2784
2018-04-19 02:29:00
alpinelinux
alpinelinux
CVE-2018-2782
2018-04-19 02:29:02
CVE-2018-2761
2018-04-19 02:29:01
CVE-2018-2787
2018-04-19 02:29:03
nvd
nvd
CVE-2018-2782
2018-04-19 02:29:02
CVE-2018-2771
2018-04-19 02:29:02
CVE-2018-2784
2018-04-19 02:29:03
centos
centos
mariadb security update
2018-08-21 01:08:00
prion
prion
Code injection
2018-04-19 02:29:00
Code injection
2018-04-19 02:29:00
Design/Logic Flaw
2018-04-19 02:29:00
ubuntucve
ubuntucve
CVE-2018-2784
2018-04-18 00:00:00
CVE-2018-2819
2018-04-18 00:00:00
CVE-2018-2766
2018-04-18 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-16 02:59:47
Denial Of Service (DoS)
2019-05-16 02:59:47
Denial Of Service (DoS)
2019-05-16 02:59:47
mariadbunix
mariadbunix
CVE-2018-2784
2018-04-19 02:29:00
CVE-2018-2761
2018-04-19 02:29:00
CVE-2018-2782
2018-04-19 02:29:00
cvelist
cvelist
CVE-2018-2819
2018-04-19 02:00:00
CVE-2018-2761
2018-04-19 02:00:00
CVE-2018-2782
2018-04-19 02:00:00
cve
cve
CVE-2018-2787
2018-04-19 02:29:03
CVE-2018-2771
2018-04-19 02:29:02
CVE-2018-2817
2018-04-19 02:29:04
redhatcve
redhatcve
CVE-2018-2782
2020-01-29 10:04:51
CVE-2018-2784
2020-01-09 09:25:18
CVE-2018-2817
2018-04-18 12:49:22

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

7.7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

70.6%

JSON
Related for SSA-2018-130-01
mageia2openvas34suse2nessus50amazon4debian6osv12redhat3ubuntu3fedora9altlinux1f53rosalinux1gentoo1freebsd1ibm3oraclelinux1photon2debiancve7alpinelinux7nvd7centos1prion4ubuntucve8veracode5mariadbunix6cvelist5cve6redhatcve5