MGASA-2019-0147

Dashboard / Vulnerabilities / MGASA-2019-0147

MGASA-2019-0147

Summary: Updated mariadb packages fix security vulnerability

Details: Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: Optimizer). Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2019-2529). Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: DDL). Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2019-2537).

References: https://advisories.mageia.org/MGASA-2019-0147.html, https://bugs.mageia.org/show_bug.cgi?id=24624, https://mariadb.com/kb/en/library/mariadb-10138-release-notes/, https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html