rpm package

suse/mariadb-100&distro=SUSE Linux Enterprise Desktop 12 SP4

pkg:rpm/suse/mariadb-100&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4

Vulnerabilities (19)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2019-2974	Med	6.5	< 10.0.40.2-2.12.2	10.0.40.2-2.12.2	Oct 16, 2019	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult
CVE-2019-2805	Med	6.5	< 10.0.40.1-2.9.1	10.0.40.1-2.9.1	Jul 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mu
CVE-2019-2740	Med	6.5	< 10.0.40.1-2.9.1	10.0.40.1-2.9.1	Jul 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multi
CVE-2019-2739	Med	5.1	< 10.0.40.1-2.9.1	10.0.40.1-2.9.1	Jul 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon
CVE-2019-2737	Med	4.9	< 10.0.40.1-2.9.1	10.0.40.1-2.9.1	Jul 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network acc
CVE-2019-2627	Med	4.9	< 10.0.40.1-2.9.1	10.0.40.1-2.9.1	Apr 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with networ
CVE-2019-2614	Med	4.4	< 10.0.40.1-2.9.1	10.0.40.1-2.9.1	Apr 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network acces
CVE-2019-2537	Med	4.9	< 10.0.38-2.6.2	10.0.38-2.6.2	Jan 16, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mult
CVE-2019-2529	Med	6.5	< 10.0.38-2.6.2	10.0.38-2.6.2	Jan 16, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via
CVE-2018-3282	Med	4.9	< 10.0.37-2.3.1	10.0.37-2.3.1	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacke
CVE-2018-3251	Med	6.5	< 10.0.37-2.3.1	10.0.37-2.3.1	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3174	Med	5.3	< 10.0.37-2.3.1	10.0.37-2.3.1	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with
CVE-2018-3156	Med	6.5	< 10.0.37-2.3.1	10.0.37-2.3.1	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3143	Med	6.5	< 10.0.37-2.3.1	10.0.37-2.3.1	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3066	Low	3.3	< 10.0.37-2.3.1	10.0.37-2.3.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access vi
CVE-2018-3064	Hig	7.1	< 10.0.37-2.3.1	10.0.37-2.3.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3063	Med	4.9	< 10.0.37-2.3.1	10.0.37-2.3.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2018-3058	Med	4.3	< 10.0.37-2.3.1	10.0.37-2.3.1	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2016-9843	Cri	9.8	< 10.0.37-2.3.1	10.0.37-2.3.1	May 23, 2017	The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

CVE-2019-2974MedOct 16, 2019
affected < 10.0.40.2-2.12.2fixed 10.0.40.2-2.12.2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult
CVE-2019-2805MedJul 23, 2019
affected < 10.0.40.1-2.9.1fixed 10.0.40.1-2.9.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mu
CVE-2019-2740MedJul 23, 2019
affected < 10.0.40.1-2.9.1fixed 10.0.40.1-2.9.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multi
CVE-2019-2739MedJul 23, 2019
affected < 10.0.40.1-2.9.1fixed 10.0.40.1-2.9.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon
CVE-2019-2737MedJul 23, 2019
affected < 10.0.40.1-2.9.1fixed 10.0.40.1-2.9.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network acc
CVE-2019-2627MedApr 23, 2019
affected < 10.0.40.1-2.9.1fixed 10.0.40.1-2.9.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with networ
CVE-2019-2614MedApr 23, 2019
affected < 10.0.40.1-2.9.1fixed 10.0.40.1-2.9.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network acces
CVE-2019-2537MedJan 16, 2019
affected < 10.0.38-2.6.2fixed 10.0.38-2.6.2
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mult
CVE-2019-2529MedJan 16, 2019
affected < 10.0.38-2.6.2fixed 10.0.38-2.6.2
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via
CVE-2018-3282MedOct 17, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacke
CVE-2018-3251MedOct 17, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3174MedOct 17, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with
CVE-2018-3156MedOct 17, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3143MedOct 17, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3066LowJul 18, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access vi
CVE-2018-3064HigJul 18, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2018-3063MedJul 18, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2018-3058MedJul 18, 2018
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p
CVE-2016-9843CriMay 23, 2017
affected < 10.0.37-2.3.1fixed 10.0.37-2.3.1
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.