MGASA-2017-0096

Source
https://advisories.mageia.org/MGASA-2017-0096.html
Import Source
https://advisories.mageia.org/MGASA-2017-0096.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2017-0096
Related
Published
2017-03-31T06:14:39Z
Modified
2017-03-31T06:01:53Z
Summary
Updated mariadb packages fix security vulnerability
Details

Crash in libmysqlclient.so in MariaDB 10.0.x through 10.0.29 (CVE-2017-3302).

Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: MyISAM). Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MariaDB Server executes to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MariaDB Server accessible data (CVE-2017-3313).

References
Credits

Affected packages

Mageia:5 / mariadb

Package

Name
mariadb
Purl
pkg:rpm/mageia/mariadb?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.0.30-1.mga5

Ecosystem specific

{
    "section": "core"
}