MGASA-2017-0096: mariadb Mageia
Published
Published 31-03-2017Last modified 16-04-2026
Vulnerability summary
MGASA-2017-0096 is a vulnerability in mariadb Mageia with no CVSS score yet.
Priority
Insufficient evidence
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
Not scored
010
No CVSS score recordedEPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 2 · Downstream 0Timeline
- 31-03-2017PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated mariadb packages fix security vulnerability Crash in libmysqlclient.so in MariaDB 10.0.x through 10.0.29 (CVE-2017-3302). Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: MyISAM). Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MariaDB Server executes to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MariaDB Server accessible data (CVE-2017-3313).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Version check
Known conditions: not stated in public data.
Mageia1 product
- mariadb< 10.0.30-1.mga5
1 vendor · 1 product
References
4 links
Related vulnerabilities
Insufficient evidenceMGASA-2018-0359mageia · mariadbmageia mariadbUpdated mariadb packages fix security vulnerability
Updated mariadb packages fix security vulnerabilities:
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
MyISAM). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized
update, insert or delete access to some of MariaDB Server accessible
data (CVE-2018-3058).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Security: Privileges). Easily exploitable vulnerability allows
high privileged attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MariaDB Server (CVE-2018-3063).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
InnoDB). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability
to cause a hang or frequently repeatable crash (complete DOS) of MariaDB
Server as well as unauthorized update, insert or delete access to some of
MariaDB Server accessible data (CVE-2018-3064).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Options). Difficult to exploit vulnerability allows high privileged
attacker with network access via multiple protocols to compromise MariaDB
Server. Successful attacks of this vulnerability can result in unauthorized
update, insert or delete access to some of MariaDB Server accessible data
as well as unauthorized read access to a subset of MariaDB Server
accessible data (CVE-2018-3066).CVSSUnscoredInsufficient evidenceMGASA-2018-0259mageia · mariadbmageia mariadbUpdated mariadb packages fix security vulnerabilities
Updated mariadb packages fix security vulnerabilities:
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Replication). Difficult to exploit vulnerability allows
unauthenticated attacker with logon to the infrastructure where MariaDB
Server executes to compromise MariaDB Server. Successful attacks require
human interaction from a person other than the attacker and while the
vulnerability is in MariaDB Server, attacks may significantly impact
additional products. Successful attacks of this vulnerability can result
in takeover of MariaDB Server (CVE-2018-2755).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Client programs). Difficult to exploit vulnerability allows unauthenticated
attacker with network access via multiple protocols to compromise MariaDB
Server. Successful attacks of this vulnerability can result in unauthorized
ability to cause a hang or frequently repeatable crash (complete DOS) of
MariaDB Server (CVE-2018-2761).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
InnoDB). Easily exploitable vulnerability allows high privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability
to cause a hang or frequently repeatable crash (complete DOS) of MariaDB
Server (CVE-2018-2766).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Locking). Difficult to exploit vulnerability allows high privileged
attacker with network access via multiple protocols to compromise MariaDB
Server. Successful attacks of this vulnerability can result in unauthorized
ability to cause a hang or frequently repeatable crash (complete DOS) of
MariaDB Server (CVE-2018-2771).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Optimizer). Easily exploitable vulnerability allows high privileged
attacker with network access via multiple protocols to compromise MariaDB
Server. Successful attacks of this vulnerability can result in unauthorized
ability to cause a hang or frequently repeatable crash (complete DOS) of
MariaDB Server (CVE-2018-2781).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
InnoDB). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability
to cause a hang or frequently repeatable crash (complete DOS) of MariaDB
Server (CVE-2018-2782).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
InnoDB). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability
to cause a hang or frequently repeatable crash (complete DOS) of MariaDB
Server (CVE-2018-2784).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
InnoDB). Easily exploitable vulnerability allows high privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability
to cause a hang or frequently repeatable crash (complete DOS) of MariaDB
Server as well as unauthorized update, insert or delete access to some of
MariaDB Server accessible data (CVE-2018-2787).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: DDL). Easily exploitable vulnerability allows low privileged
attacker with network access via multiple protocols to compromise MariaDB
Server. Successful attacks of this vulnerability can result in unauthorized
read access to a subset of MariaDB Server accessible data (CVE-2018-2813).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: DDL). Easily exploitable vulnerability allows low privileged
attacker with network access via multiple protocols to compromise MariaDB
Server. Successful attacks of this vulnerability can result in unauthorized
ability to cause a hang or frequently repeatable crash (complete DOS) of
MariaDB Server (CVE-2018-2817).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
InnoDB). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability
to cause a hang or frequently repeatable crash (complete DOS) of MariaDB
Server (CVE-2018-2819).CVSSUnscoredInsufficient evidenceMGASA-2018-0139mageia · mariadbmageia mariadbUpdated mariadb packages fix security vulnerability
Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server:
Partition). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability to
cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server
as well as unauthorized update, insert or delete access to some of MariaDB
Server accessible data (CVE-2018-2562).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server:
DDL). Easily exploitable vulnerability allows low privileged attacker with
network access via multiple protocols to compromise MariaDB Server. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
hang or frequently repeatable crash (complete DOS) of MariaDB Server
(CVE-2018-2622).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server:
Optimizer). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability to
cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server
(CVE-2018-2640).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server:
Optimizer). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability to
cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server
(CVE-2018-2665).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server:
Optimizer). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized ability to
cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server
(CVE-2018-2668).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
InnoDB). Easily exploitable vulnerability allows high privileged attacker with
network access via multiple protocols to compromise MariaDB Server. Successful
attacks of this vulnerability can result in unauthorized creation, deletion or
modification access to critical data or all MariaDB Server accessible data and
unauthorized ability to cause a hang or frequently repeatable crash (complete
DOS) of MariaDB Server (CVE-2018-2612).CVSSUnscoredInsufficient evidenceMGASA-2017-0461mageia · mariadb +1 moremageia mariadbUpdated mariadb packages fix security vulnerabilities
Difficult to exploit vulnerability in MariaDB Server allows high
privileged attacker with logon to the infrastructure where MariaDB
Server executes to compromise MariaDB Server. Successful attacks of this
vulnerability can result in unauthorized access to critical data or
complete access to all MariaDB Server accessible data (CVE-2017-10268).
Easily exploitable vulnerability in MariaDB Server allows low privileged
attacker with network access via multiple protocols to compromise
MariaDB Server. Successful attacks of this vulnerability can result in
unauthorized ability to cause a hang or frequently repeatable crash
(complete DOS) of MariaDB Server (CVE-2017-10378).CVSSUnscoredInsufficient evidenceMGASA-2017-0289mageia · mariadbmageia mariadbUpdated mariadb packages fix security vulnerabilities
Difficult to exploit vulnerability in MariaDB Server allows high
privileged attacker with logon to the infrastructure where MariaDB
Server executes to compromise MariaDB Server. Successful attacks
require human interaction from a person other than the attacker.
Successful attacks of this vulnerability can result in unauthorized
access to critical data or complete access to all MariaDB Server
accessible data and unauthorized ability to cause a hang or frequently
repeatable crash (complete DOS) of MariaDB Server (CVE-2017-3265).
Easily exploitable vulnerability in MariaDB Server allows low privileged
attacker with logon to the infrastructure where MariaDB Server executes
to compromise MariaDB Server. Successful attacks of this vulnerability
can result in unauthorized update, insert or delete access to some of
MariaDB Server accessible data as well as unauthorized read access to a
subset of MariaDB Server accessible data and unauthorized ability to
cause a partial denial of service (partial DOS) of MariaDB Server
(CVE-2017-3636).
Easily exploitable vulnerability in MariaDB Server allows high
privileged attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MariaDB Server (CVE-2017-3641).
Difficult to exploit vulnerability in MariaDB Server allows low
privileged attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this vulnerability can
result in unauthorized update, insert or delete access to some of
MariaDB Server accessible data (CVE-2017-3653).CVSSUnscoredInsufficient evidenceMGASA-2017-0054mageia · mariadbmageia mariadbUpdated mariadb packages fix security vulnerability
Root Privilege Escalation (CVE-2016-6664).
Unspecified vulnerability affecting the Optimizer component
(CVE-2017-3238).
Unspecified vulnerability affecting the Charsets component
(CVE-2017-3243).
Unspecified vulnerability affecing the DML component (CVE-2017-3244).
Unspecified vulnerability affecting InnoDB (CVE-2017-3257).
Unspecified vulnerability in the DDL component (CVE-2017-3258).
Unsafe chmod/chown use in init script (CVE-2017-3265).
Unrestricted mysqld_safe's ledir (CVE-2017-3291).
Insecure error log file handling in mysqld_safe, due to an incomplete fix
for CVE-2016-6664 (CVE-2017-3312).
Unspecified vulnerability affecting Logging (CVE-2017-3317).
Unspecified vulnerability affecting Error Handling (CVE-2017-3318).
Applications using the client library for MySQL (libmysqlclient.so) had a
use-after-free issue that could cause the applications to crash
(bsc#1022428).CVSSUnscored