pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
vuln-list-alt/oval/c10f1/ALT-PU-2018-2267/definitions.json

355 lines
22 KiB
JSON
Raw Normal View History

ALT Vulnerability
2024-06-28 13:17:52 +00:00
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20182267",
"Version": "oval:org.altlinux.errata:def:20182267",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2018-2267: package `MySQL` update to version 5.7.23-alt1.S1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f1"
],
"Products": [
"ALT SP Workstation",
"ALT SP Server"
]
}
],
"References": [
{
"RefID": "ALT-PU-2018-2267",
"RefURL": "https://errata.altlinux.org/ALT-PU-2018-2267",
"Source": "ALTPU"
},
{
"RefID": "BDU:2018-00966",
"RefURL": "https://bdu.fstec.ru/vul/2018-00966",
"Source": "BDU"
},
{
"RefID": "BDU:2019-01627",
"RefURL": "https://bdu.fstec.ru/vul/2019-01627",
"Source": "BDU"
},
{
"RefID": "BDU:2020-00681",
"RefURL": "https://bdu.fstec.ru/vul/2020-00681",
"Source": "BDU"
},
{
"RefID": "BDU:2020-00682",
"RefURL": "https://bdu.fstec.ru/vul/2020-00682",
"Source": "BDU"
},
{
"RefID": "BDU:2020-04694",
"RefURL": "https://bdu.fstec.ru/vul/2020-04694",
"Source": "BDU"
},
{
"RefID": "CVE-2018-2767",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-2767",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3054",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3054",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3056",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3056",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3058",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3058",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3060",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3060",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3061",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3061",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3062",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3062",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3064",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3064",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3065",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3065",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3066",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3066",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3070",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3070",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3071",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3071",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3077",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3077",
"Source": "CVE"
},
{
"RefID": "CVE-2018-3081",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-3081",
"Source": "CVE"
}
],
"Description": "This update upgrades MySQL to version 5.7.23-alt1.S1. \nSecurity Fix(es):\n\n * BDU:2018-00966: Уязвимость компонента InnoDB системы управления базами данных MySQL, позволяющая нарушителю получить несанкционированный доступ к защищаемым данным или вызвать отказ в обслуживании\n\n * BDU:2019-01627: Уязвимость в компоненте Server: Options системы управления базами данных Oracle MySQL, позволяющая нарушителю получить несанкционированный доступ к функционалу и данным сервера\n\n * BDU:2020-00681: Уязвимость компонента Server:Security:Encryption системы управления базами данных Oracle MySQL, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным\n\n * BDU:2020-00682: Уязвимость компонента MyISAM системы управления базами данных Oracle MySQL, позволяющая нарушителю оказать воздействие на целостность данных\n\n * BDU:2020-04694: Уязвимость компонента InnoDB системы управления базами данных MySQL Server, позволяющая нарушителю создавать, удалять или изменять доступ к критически важным данным или всем данным, доступным для MySQL Server или вызвать отказ в обслуживании\n\n * CVE-2018-2767: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).\n\n * CVE-2018-3054: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).\n\n * CVE-2018-3056: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).\n\n * CVE-2018-3058: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Int
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2018-09-03"
},
"Updated": {
"Date": "2018-09-03"
},
"BDUs": [
{
"ID": "BDU:2018-00966",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:P/A:C",
"CVSS3": "AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"CWE": "CWE-264",
"Href": "https://bdu.fstec.ru/vul/2018-00966",
"Impact": "High",
"Public": "20180717"
},
{
"ID": "BDU:2019-01627",
"CVSS": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
"CVSS3": "AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-284",
"Href": "https://bdu.fstec.ru/vul/2019-01627",
"Impact": "Low",
"Public": "20180717"
},
{
"ID": "BDU:2020-00681",
"CVSS": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-200",
"Href": "https://bdu.fstec.ru/vul/2020-00681",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "BDU:2020-00682",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"CVSS3": "AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"CWE": "CWE-264",
"Href": "https://bdu.fstec.ru/vul/2020-00682",
"Impact": "Low",
"Public": "20180418"
},
{
"ID": "BDU:2020-04694",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:C/A:C",
"CVSS3": "AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"CWE": "CWE-284",
"Href": "https://bdu.fstec.ru/vul/2020-04694",
"Impact": "Low",
"Public": "20180718"
}
],
"CVEs": [
{
"ID": "CVE-2018-2767",
"CVSS": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-2767",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3054",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3054",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3056",
"CVSS": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3056",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3058",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3058",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3060",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3060",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3061",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3061",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3062",
"CVSS": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3062",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3064",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3064",
"Impact": "High",
"Public": "20180718"
},
{
"ID": "CVE-2018-3065",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3065",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3066",
"CVSS": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3066",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3070",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3070",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3071",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3071",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3077",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3077",
"Impact": "Low",
"Public": "20180718"
},
{
"ID": "CVE-2018-3081",
"CVSS": "AV:N/AC:M/Au:S/C:N/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-3081",
"Impact": "Low",
"Public": "20180718"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:4001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20182267001",
"Comment": "MySQL-client is earlier than 0:5.7.23-alt1.S1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20182267002",
"Comment": "MySQL-server is earlier than 0:5.7.23-alt1.S1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20182267003",
"Comment": "MySQL-server-perl is earlier than 0:5.7.23-alt1.S1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20182267004",
"Comment": "libmysqlclient20 is earlier than 0:5.7.23-alt1.S1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20182267005",
"Comment": "libmysqlclient20-devel is earlier than 0:5.7.23-alt1.S1"
}
]
}
]
}
}
]
}
Reference in New Issue Copy Permalink