MariaDB 已更新到 10.0.22，修复了安全问题和缺陷。

上游版本修复了下列漏洞：

CVE-2015-4802、CVE-2015-4807、CVE-2015-4815、CVE-2015-4826、CVE-2015-4830、CVE-2015-4836、CVE-2015-4858、CVE-2015-4861、CVE-2015-4870、CVE-2015-4913、CVE-2015-4792

有关上游变更和发行说明的列表，请参阅以下网址：

- https://kb.askmonty.org/en/mariadb-10022-release-notes/

- https://kb.askmonty.org/en/mariadb-10022-changelog/

修复了以下版本问题：

- bsc#937787：修复 main.bootstrap 测试（将测试结果中的默认字符集更改为 utf8）

MariaDB 已更新到版本 10.0.22，提供了许多安全问题的补丁和其他改善。

已修复了以下 CVE：

- 10.0.22：CVE-2015-4802、CVE-2015-4807、CVE-2015-4815、CVE-2015-4826、CVE-2015-4830、CVE-2015-4836、CVE-2015-4858、CVE-2015-4861、CVE-2015-4870、CVE-2015-4913、CVE-2015-4792

- 修复通过 mysql-systemd-helper 脚本造成的信息泄漏。
 （CVE-2015-5969、bsc#957174）

如需完整的变更列表，请参阅上游发行说明与变更日志文档：

- https://kb.askmonty.org/en/mariadb-10022-release-notes/

- https://kb.askmonty.org/en/mariadb-10022-changelog/

请注意，Tenable Network Security 已直接从 SUSE 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.46 or 5.6.x prior to 5.6.27 and is affected by vulnerabilities in the following components :

- :

 - Client Programs
 - Data Definition Language
 - Data Manipulation Language
 - InnoDB
 - Option
 - Partition
 - Query Cache
 - Security:Privileges
 - Server Parser
 - Server Partition
 - Stored Procedures
 - Types

MariaDB is a community-developed fork of the MySQL relational database. The version of MariaDB installed on the remote host is earlier than 10.0.22, and is therefore affected by the following denial of service vulnerabilities :

 - Multiple denial ofservice vulnerabilities exist due to multiple unspecified flaws in the 'Server : Partition'subcomponent.  An authenticated, remote attacker can exploit these flaws to affect availability. (CVE-2015-4792, CVE-2015-4802)
 - A denial of service vulnerability exists due to an unspecified flaw in the Query Cache subcomponent.  An authenticated, remote attacker can exploit this to affect availability. (CVE-2015-4807)
 - A denial of service vulnerability exists due to an unspecified flaw in the DDL subcomponent.  An authenticated, remote attacker can exploit this to affect availability. (CVE-2015-4815)
 - An information disclosure vulnerability exists due to an unspecified flaw in the Types subcomponent.  An authenticated, remote attacker can exploit this to gain access to sensitive information. (CVE-2015-4826)
 - An unspecified vulnerability exists due to an unspecified flaw in the 'Security : Privileges' subcomponent.  An authenticated, remote attacker can exploit this to affect integrity. (CVE-2015-4830)
 - A denial of service vulnerability exists due to an unspecified flaw in the SP subcomponent.  An authenticated, remote attacker can exploit this to affect availability. (CVE-2015-4836)
 - Multiple denial of service vulnerabilities exist due to multiple unspecified flaws in the DML subcomponent.  An authenticated, remote attacker can exploit these flaws to affect availability. (CVE-2015-4858, CVE-2015-4913)
 - A denial of service vulnerability exists due to an unspecified flaw in the InnoDB subcomponent.  An authenticated, remote attacker can exploit this to affect availability. (CVE-2015-4861)
 - A denial of service vulnerability exists due to an unspecified flaw in the 'Server : Parser' subcomponent.  An authenticated, remote attacker can exploit this to affect availability. (CVE-2015-4870)
 - A denial of service vulnerability exists due to a flaw in the 'convert_kill_to_deadlock_error()' function that is triggered when handling rollbacks.  An authenticated, remote attacker can exploit this, via a specially crafted query, to cause the database to crash.
 - A denial of service vulnerability exists due to a flaw in the 'no_rows_in_result()' function that is triggered when handling logical conditions.  An authenticated, remote attacker can exploit this, via a specially crafted query, to cause the database to crash.

ID	名稱	產品	系列	已發布	已更新	嚴重性
87440	openSUSE 安全更新：mariadb (openSUSE-2015-884)	Nessus	SuSE Local Security Checks	2015/12/17	2021/1/19	medium
88515	SUSE SLED12 / SLES12 安全更新：mariadb (SUSE-SU-2016:0296-1)	Nessus	SuSE Local Security Checks	2016/2/2	2021/1/6	medium
9252	Oracle MySQL 5.5.x < 5.5.46 / 5.6.x < 5.6.27 Multiple Vulnerabilities	Nessus Network Monitor	Database	2016/4/15	2019/3/6	high
9284	MariaDB Server 10.0.x < 10.0.22 Multiple DoS Vulnerabilities	Nessus Network Monitor	Database	2016/5/13	2019/3/6	medium

偵測

搜尋 Plugin

medium

medium

high

medium