- Home
- CVEs with nessus.description==The version of MariaDB running on the remote host is 10.1.x prior to
10.1.9. It is, therefore, affected by the following vulnerabilities :
- A flaw exists in the encryption subcomponent due to a
failure to properly handle faults associated with the
Chinese Remainder Theorem (CRT) process when allowing
ephemeral key exchange without low memory optimizations
on a server. An unauthenticated, remote attacker can
exploit this to disclose private RSA keys by capturing
TLS handshakes. (CVE-2015-7744)
- An unspecified flaw exists in the InnoDB subcomponent
that allows an authenticated, remote attacker to cause a
denial of service. (CVE-2016-0610)
- An unspecified flaw exists in the Option subcomponent
that allows an authenticated, remote attacker to gain
elevated privileges. (CVE-2016-3471)
- A flaw exists in the check_fk_parent_table_access()
function in sql_parse.cc that is triggered when
performing database name conversions. An authenticated,
remote attacker can exploit this to crash the database,
resulting in a denial of service.
- A flaw exists in the gis_field_options_read() function
in field.cc that is triggered during the handling of the
GIS feature. An authenticated, remote attacker can
exploit this to crash the database, resulting in a
denial of service.
- An unspecified flaw exists in the init_read_record_idx()
function that is triggered when handling errors. An
authenticated, remote attacker can exploit this to cause
a denial of service.
- An overflow condition exists in the XMLColumns()
function in tabxml.cpp due to improper validation of
user-supplied input. An authenticated, remote attacker
can exploit this to cause a buffer overflow, resulting
in a denial of service condition or the execution of
arbitrary code.
- An unspecified flaw exists that is triggered when
handling UPDATE queries with JOIN. An authenticated,
remote attacker can exploit this to crash the database,
resulting in a denial of service.
- An unspecified flaw exists that is triggered during the
handling of 'View' or 'Derived' fields. An
authenticated, remote attacker can exploit this to crash
the database, resulting in a denial of service.
- A flaw exists in the row_merge_sort() function that is
triggered when handling FT-index creation. An
authenticated, remote attacker can exploit this to crash
the database, resulting in a denial of service.
Note that Nessus has not tested for these issues but has instead
relied only on the application's self-reported version number.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top