The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0587 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld,     and many client programs.

    The following packages have been upgraded to a later upstream version: rh-mysql56-mysql (5.6.39).
    (BZ#1533831)

    Security Fix(es):

    * mysql: sha256_password authentication DoS via long password (CVE-2018-2696)

    * mysql: Server : Partition unspecified vulnerability (CPU Jan 2018) (CVE-2018-2562)

    * mysql: Server: GIS unspecified vulnerability (CPU Jan 2018) (CVE-2018-2573)

    * mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018) (CVE-2018-2583)

    * mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018) (CVE-2018-2590)

    * mysql: Server : Partition unspecified vulnerability (CPU Jan 2018) (CVE-2018-2591)

    * mysql: InnoDB unspecified vulnerability (CPU Jan 2018) (CVE-2018-2612)

    * mysql: Server: DDL unspecified vulnerability (CPU Jan 2018) (CVE-2018-2622)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018) (CVE-2018-2640)

    * mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018) (CVE-2018-2645)

    * mysql: Server: Replication unspecified vulnerability (CPU Jan 2018) (CVE-2018-2647)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018) (CVE-2018-2665)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018) (CVE-2018-2668)

    * mysql: sha256_password authentication DoS via hash with large rounds value (CVE-2018-2703)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    The CVE-2018-2696 and CVE-2018-2703 issues were discovered by Red Hat Product Security.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2639:01 advisory.

    * mysql: sha256_password authentication DoS via long password (CVE-2018-2696)
    * mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2562)
    * mysql: Server: GIS unspecified vulnerability (CPU Jan 2018) (CVE-2018-2573)
    * mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2583)
    * mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2590)
    * mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2591)
    * mysql: InnoDB unspecified vulnerability (CPU Jan 2018) (CVE-2018-2612)
    * mysql: Server: DDL unspecified vulnerability (CPU Jan 2018) (CVE-2018-2622)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2640)
    * mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2645)
    * mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2647)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2665)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2668)
    * mysql: sha256_password authentication DoS via hash with large rounds value     (CVE-2018-2703)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201802-04 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the referenced CVE identifiers for details.
  Impact :

    A remote attacker could execute arbitrary code without authentication or       cause a partial denial of service condition.
  Workaround :

    There are no known workarounds at this time.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2638:01 advisory.

    * mysql: sha256_password authentication DoS via long password (CVE-2018-2696)
    * mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2562)
    * mysql: Server: GIS unspecified vulnerability (CPU Jan 2018) (CVE-2018-2573)
    * mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2583)
    * mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2590)
    * mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2591)
    * mysql: InnoDB unspecified vulnerability (CPU Jan 2018) (CVE-2018-2612)
    * mysql: Server: DDL unspecified vulnerability (CPU Jan 2018) (CVE-2018-2622)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2640)
    * mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2645)
    * mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2647)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2665)
    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)     (CVE-2018-2668)
    * mysql: sha256_password authentication DoS via hash with large rounds value     (CVE-2018-2703)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3442 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld,     and many client programs.

    The following packages have been upgraded to a later upstream version: rh-mysql57-mysql (5.7.20).
    (BZ#1505114)

    Security Fix(es):

    * This update fixes several vulnerabilities in the MySQL database server. Information about these flaws     can be found on the Oracle Critical Patch Update Advisory page listed in the References section.
    (CVE-2017-10155, CVE-2017-10165, CVE-2017-10167, CVE-2017-10227, CVE-2017-10268, CVE-2017-10276,     CVE-2017-10279, CVE-2017-10283, CVE-2017-10284, CVE-2017-10286, CVE-2017-10294, CVE-2017-10296,     CVE-2017-10311, CVE-2017-10313, CVE-2017-10314, CVE-2017-10320, CVE-2017-10365, CVE-2017-10378,     CVE-2017-10379, CVE-2017-10384)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
194061	RHEL 6 / 7 : rh-mysql56-mysql (RHSA-2018:0587)	Nessus	Red Hat Local Security Checks	2024/4/27	2025/3/21	high
289268	MiracleLinux 7 : rh-mysql56-mysql-5.6.39-1.el7.1 (AXSA:2018-2639:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
106885	GLSA-201802-04 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/2/20	2025/10/29	high
289524	MiracleLinux 4 : rh-mysql56-mysql-5.6.39-1.AXS4.1 (AXSA:2018-2638:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
210300	RHEL 6 / 7 : rh-mysql57-mysql (RHSA-2017:3442)	Nessus	Red Hat Local Security Checks	2024/11/5	2024/11/5	high

偵測

搜尋 Plugin

high

high

high

high

high