ALT-PU-2018-2009

Низкий

ALT-PU-2018-2009: package mariadb update to version 10.3.8-alt1.S1

Источник

errata.altlinux.org

Дата публикации

13.07.2018

Дата обновления

13.07.2018

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades mariadb to version 10.3.8-alt1.S1.

Устраненные уязвимости4

BDU:2021-02474

Средний 4.9

Дата публикации: 14.05.2021

Уязвимость компонента InnoDB системы управления базами данных Oracle MySQL Server, позволяющая нарушителю вызвать отказ в обслуживании

CVSS 3.1

Средний 4.9

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: High
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 6.8

AV:N/AC:L/Au:S/C:N/I:N/A:C

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: None
Availability: Complete

Ссылки

BDU:2021-02474 https://bdu.fstec.ru/vul/2021-02474

Ссылки1

ALT-PU-2018-2009 https://errata.altlinux.org/ALT-PU-2018-2009

Связанные уязвимости

CVE-2021-2174

CVSS3: 4.4

ubuntu

больше 5 лет назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).