Korean
<< Back
VID 14244
Severity 30
Port 22
Protocol TCP
Class LSC
Detailed Description The remote system does not apply USN-4070-1 which is mysql security update. The system which does not apply the update is affected by the following vulnerabilities:

- Denial of Service
'Server: XML' subcomponent

- Denial of Service and Data Modification
'Server: Security: Audit' subcomponent
'Server: Security: Privileges' subcomponent
'Server: Parser' subcomponent

- Gaining complete control
'Server: Packaging (cURL)' subcomponent

Note: This check solely relied on the mysql DPKG version of the remote system to assess this vulnerability, so this might be a false positive.

* References:
https://usn.ubuntu.com/4070-1/

* Platforms Affected:
Ubuntu 16.04 LTS
Ubuntu 18.04 LTS
Recommendation For a command line interface, use the following command to update the operating system:
# apt-get upgrade
Related URL CVE-2019-2737,CVE-2019-2738,CVE-2019-2739,CVE-2019-2740,CVE-2019-2741,CVE-2019-2757,CVE-2019-2758,CVE-2019-2774,CVE-2019-2778,CVE-2019-2791 (CVE)
Related URL (SecurityFocus)
Related URL (ISS)