VID |
25301 |
Severity |
40 |
Port |
3306 |
Protocol |
TCP |
Class |
DB |
Detailed Description |
The version of MariaDB running on the remote host is 10.2.x prior to 10.2.19. It is, therefore, affected by multiple vulnerabilities.
* References: https://lists.askmonty.org/cgi-bin/mailman/listinfo/announce https://mariadb.org/mariadb-10-2-19-now-available https://mariadb.com/kb/en/mdb-10219-rn http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9843 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3143 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3156 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3162 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3173 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3174 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3185 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3200 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3251 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3277 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3282 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3284 https://jira.mariadb.org/browse/MDEV-12023 https://jira.mariadb.org/browse/MDEV-12547 https://jira.mariadb.org/browse/MDEV-12837 https://jira.mariadb.org/browse/MDEV-13564 https://jira.mariadb.org/browse/MDEV-13671 https://jira.mariadb.org/browse/MDEV-14585 https://jira.mariadb.org/browse/MDEV-14717 https://jira.mariadb.org/browse/MDEV-16980 https://jira.mariadb.org/browse/MDEV-17073 https://jira.mariadb.org/browse/MDEV-17215 https://jira.mariadb.org/browse/MDEV-17230 https://jira.mariadb.org/browse/MDEV-17289 https://jira.mariadb.org/browse/MDEV-17433 https://jira.mariadb.org/browse/MDEV-17491 https://jira.mariadb.org/browse/MDEV-17531 https://jira.mariadb.org/browse/MDEV-17532 https://jira.mariadb.org/browse/MDEV-17541 https://jira.mariadb.org/browse/MDEV-17545 https://jira.mariadb.org/browse/MDEV-17546 https://jira.mariadb.org/browse/MDEV-17548 * Platforms Affected: MariaDB versions 10.2.x prior to 10.2.19 Any operating system Any version |
Recommendation |
Upgrade to the latest version of MariaDB (10.2.19 or later), available from the MariaDB Web site at https://downloads.mariadb.org/ |
Related URL |
CVE-2016-9843,CVE-2018-3143,CVE-2018-3156,CVE-2018-3162,CVE-2018-3173,CVE-2018-3174,CVE-2018-3185,CVE-2018-3200,CVE-2018-3251,CVE-2018-3277 (CVE) |
Related URL |
95131,105594,105600,105610,105612 (SecurityFocus) |
Related URL |
(ISS) |
|