Advisories ยป MGASA-2019-0181

Updated mariadb packages fix security vulnerability

Publication date: 19 May 2019
Modification date: 19 May 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2019-2614 , CVE-2019-2627

Description

Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Replication). Difficult to exploit vulnerability allows high
privileged attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MariaDB Server (CVE-2019-2614).

Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Security: Privileges). Easily exploitable vulnerability allows
high privileged attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MariaDB Server (CVE-2019-2627).
                

References

SRPMS

6/core