Все бюллетени/sisyphus/ALT-PU-2017-1294-1
ALT-PU-2017-1294-1

Обновление пакета mariadb в ветке sisyphus

Версия10.1.22-alt1
Задание#179902
Опубликовано2017-03-16
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (2)

CVE-2017-3302
HIGH7.5

Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.

Опубликовано: 2017-02-12Изменено: 2025-04-20
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 3.xВЫСОКАЯ 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ссылки
CVE-2017-3313
MEDIUM4.7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).

Опубликовано: 2017-01-27Изменено: 2025-04-20
CVSS 2.0НИЗКАЯ 1.5
CVSS:2.0/AV:L/AC:M/Au:S/C:P/I:N/A:N
CVSS 3.xСРЕДНЯЯ 4.7
CVSS:3.x/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Ссылки