Vulnerabilities > CVE-2016-0656 - Remote Security vulnerability in Oracle MySQL

047910
CVSS 3.5 - LOW
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
oracle
nessus

Summary

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0654.

Vulnerable Configurations

Part Description Count
Application
Oracle
537

Nessus

  • NASL familyDatabases
    NASL idMYSQL_5_7_11.NASL
    descriptionThe version of MySQL running on the remote host is 5.7.x prior to 5.7.11. It is, therefore, potentially affected by multiple vulnerabilities : - A NULL pointer dereference flaw exists in the bundled version of OpenSSL in file rsa_ameth.c due to improper handling of ASN.1 signatures that are missing the PSS parameter. A remote attacker can exploit this to cause the signature verification routine to crash, resulting in a denial of service condition. (CVE-2015-3194) - An unspecified flaw exists in the DML subcomponent that allows an authenticated, remote attacker to impact integrity and availability. (CVE-2016-0640) - An unspecified flaw exists in the MyISAM subcomponent that allows an authenticated, remote attacker to disclose sensitive information or cause a denial of service condition. (CVE-2016-0641) - An unspecified flaw exists in the DDL subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0644) - Multiple unspecified flaws exist in the DML subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0646, CVE-2016-0652) - An unspecified flaw exists in the PS subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0649) - An unspecified flaw exists in the Replication subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0650) - An unspecified flaw exists in the FTS subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0653) - Multiple unspecified flaws exist in the InnoDB subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0654, CVE-2016-0656, CVE-2016-0668) - An unspecified flaw exists in the Optimizer subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0658) - An unspecified flaw exists in the Options subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0661) - An unspecified flaw exists in the Performance Schema subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0663) - An unspecified flaw exists in the Security: Encryption subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. (CVE-2016-0665) - A denial of service vulnerability exists in the bundled OpenSSL library due to improper handling of variables declared as TEXT or BLOB. An authenticated, remote attacker can exploit this to corrupt data or cause a denial of service condition. - A denial of service vulnerability exists that is triggered when handling a
    last seen2020-06-01
    modified2020-06-02
    plugin id89056
    published2016-03-01
    reporterThis script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/89056
    titleMySQL 5.7.x < 5.7.11 Multiple Vulnerabilities
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(89056);
      script_version("1.13");
      script_cvs_date("Date: 2019/11/20");
    
      script_cve_id(
        "CVE-2015-3194",
        "CVE-2016-0640",
        "CVE-2016-0641",
        "CVE-2016-0644",
        "CVE-2016-0646",
        "CVE-2016-0649",
        "CVE-2016-0650",
        "CVE-2016-0652",
        "CVE-2016-0653",
        "CVE-2016-0654",
        "CVE-2016-0656",
        "CVE-2016-0658",
        "CVE-2016-0661",
        "CVE-2016-0663",
        "CVE-2016-0665",
        "CVE-2016-0668"
      );
    
      script_name(english:"MySQL 5.7.x < 5.7.11 Multiple Vulnerabilities");
      script_summary(english:"Checks the version of MySQL server.");
    
      script_set_attribute(attribute:"synopsis", value:
    "The remote database server is affected by multiple vulnerabilities.");
      script_set_attribute(attribute:"description", value:
    "The version of MySQL running on the remote host is 5.7.x prior to
    5.7.11. It is, therefore, potentially affected by multiple
    vulnerabilities :
    
      - A NULL pointer dereference flaw exists in the bundled
        version of OpenSSL in file rsa_ameth.c due to improper
        handling of ASN.1 signatures that are missing the PSS
        parameter. A remote attacker can exploit this to cause
        the signature verification routine to crash, resulting
        in a denial of service condition. (CVE-2015-3194)
    
      - An unspecified flaw exists in the DML subcomponent that
        allows an authenticated, remote attacker to impact
        integrity and availability. (CVE-2016-0640)
    
      - An unspecified flaw exists in the MyISAM subcomponent
        that allows an authenticated, remote attacker to
        disclose sensitive information or cause a denial of
        service condition. (CVE-2016-0641)
    
      - An unspecified flaw exists in the DDL subcomponent that
        allows an authenticated, remote attacker to cause a
        denial of service condition. (CVE-2016-0644)
    
      - Multiple unspecified flaws exist in the DML subcomponent
        that allow an authenticated, remote attacker to cause a
        denial of service condition. (CVE-2016-0646,
        CVE-2016-0652)
    
      - An unspecified flaw exists in the PS subcomponent that
        allows an authenticated, remote attacker to cause a
        denial of service condition. (CVE-2016-0649)
    
      - An unspecified flaw exists in the Replication
        subcomponent that allows an authenticated, remote
        attacker to cause a denial of service condition.
        (CVE-2016-0650)
    
      - An unspecified flaw exists in the FTS subcomponent that
        allows an authenticated, remote attacker to cause a
        denial of service condition. (CVE-2016-0653)
    
      - Multiple unspecified flaws exist in the InnoDB
        subcomponent that allow an authenticated, remote
        attacker to cause a denial of service condition.
        (CVE-2016-0654, CVE-2016-0656, CVE-2016-0668)
    
      - An unspecified flaw exists in the Optimizer subcomponent
        that allows an authenticated, remote attacker to cause a
        denial of service condition. (CVE-2016-0658)
    
      - An unspecified flaw exists in the Options subcomponent
        that allows an authenticated, remote attacker to cause a
        denial of service condition. (CVE-2016-0661)
    
      - An unspecified flaw exists in the Performance Schema
        subcomponent that allows an authenticated, remote
        attacker to cause a denial of service condition.
        (CVE-2016-0663)
    
      - An unspecified flaw exists in the Security: Encryption
        subcomponent that allows an authenticated, remote
        attacker to cause a denial of service condition.
        (CVE-2016-0665)
    
      - A denial of service vulnerability exists in the bundled
        OpenSSL library due to improper handling of variables
        declared as TEXT or BLOB. An authenticated, remote
        attacker can exploit this to corrupt data or cause a
        denial of service condition.
    
      - A denial of service vulnerability exists that is
        triggered when handling a 'CREATE TEMPORARY TABLE ..
        SELECT' statement involving BIT columns. An
        authenticated, remote attacker can exploit this to
        create an improper table or cause the server to exit, 
        resulting in a denial of service condition.
    
      - A denial of service vulnerability exists due to improper
        handling of queries that contain 'WHERE 0'. An
        authenticated, remote attacker can exploit this to cause
        an uninitialized read, resulting in a denial of service
        condition.");
      script_set_attribute(attribute:"see_also", value:"https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-11.html");
      # http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixMSQL
      script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a0defed6");
      script_set_attribute(attribute:"solution", value:
    "Upgrade to MySQL version 5.7.11 or later.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H");
      script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
      script_set_attribute(attribute:"cvss_score_source", value:"CVE-2016-0641");
    
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2015/12/03");
      script_set_attribute(attribute:"patch_publication_date", value:"2016/02/05");
      script_set_attribute(attribute:"plugin_publication_date", value:"2016/03/01");
    
      script_set_attribute(attribute:"potential_vulnerability", value:"true");
      script_set_attribute(attribute:"plugin_type", value:"remote");
      script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:mysql");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_family(english:"Databases");
    
      script_copyright(english:"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
    
      script_dependencies("mysql_version.nasl", "mysql_login.nasl");
      script_require_keys("Settings/ParanoidReport");
      script_require_ports("Services/mysql", 3306);
    
      exit(0);
    }
    
    include("mysql_version.inc");
    
    mysql_check_version(fixed:'5.7.11', min:'5.7', severity:SECURITY_WARNING);
    
  • NASL familyDatabases
    NASL idMYSQL_5_7_11_RPM.NASL
    descriptionThe version of Oracle MySQL installed on the remote host is 5.7.x prior to 5.7.11. It is, therefore, affected by the following vulnerabilities : - A NULL pointer dereference flaw exists in the bundled version of OpenSSL in file rsa_ameth.c due to improper handling of ASN.1 signatures that are missing the PSS parameter. A remote attacker can exploit this to cause the signature verification routine to crash, resulting in a denial of service condition. (CVE-2015-3194) - A flaw exists in the ASN1_TFLG_COMBINE implementation in file tasn_dec.c related to handling malformed X509_ATTRIBUTE structures. A remote attacker can exploit this to cause a memory leak by triggering a decoding failure in a PKCS#7 or CMS application, resulting in a denial of service. (CVE-2015-3195) - An unspecified flaw exists in the DML subcomponent that allows a local attacker to impact integrity and availability. (CVE-2016-0640) - An unspecified flaw exists in the MyISAM subcomponent that allows a local attacker to disclose potentially sensitive information or cause a denial of service condition. (CVE-2016-0641) - An unspecified flaw exists in the DDL subcomponent that allows a local attacker to cause a denial of service condition. (CVE-2016-0644) - Multiple unspecified flaws exist in the DML subcomponent that allow a local attacker to cause a denial of service condition. (CVE-2016-0646, CVE-2016-0652) - An unspecified flaw exists in the PS subcomponent that allows a local attacker to cause a denial of service condition. (CVE-2016-0649) - An unspecified flaw exists in the Replication subcomponent that allows a local attacker to cause a denial of service condition. (CVE-2016-0650) - An unspecified flaw exists in the FTS subcomponent that allows a local attacker to cause a denial of service condition. (CVE-2016-0653) - Multiple unspecified flaws exist in the InnoDB subcomponent that allow a local attacker to cause a denial of service condition. (CVE-2016-0654, CVE-2016-0656, CVE-2016-0668) - An unspecified flaw exists in the Optimizer subcomponent that allows a local attacker to cause a denial of service condition. (CVE-2016-0658) - An unspecified flaw exists in the Options subcomponent that allows a local attacker to cause a denial of service condition. (CVE-2016-0661) - An unspecified flaw exists in the Performance Schema subcomponent that allows a local attacker to cause a denial of service condition. (CVE-2016-0663) - An unspecified flaw exists in the Security: Encryption subcomponent that allows a local attacker to cause a denial of service condition. (CVE-2016-0665) - An unspecified flaw exists in the Security: Encryption subcomponent that allows an unauthenticated, remote attacker to disclose potentially sensitive information. (CVE-2016-3452) - A denial of service vulnerability exists in the bundled OpenSSL library due to improper handling of variables declared as TEXT or BLOB. An authenticated, remote attacker can exploit this to corrupt data or cause a denial of service condition. - A denial of service vulnerability exists that is triggered when handling a
    last seen2020-06-04
    modified2016-05-02
    plugin id90833
    published2016-05-02
    reporterThis script is Copyright (C) 2016-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/90833
    titleOracle MySQL 5.7.x < 5.7.11 Multiple Vulnerabilities (April 2016 CPU) (July 2016 CPU)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(90833);
      script_version("1.14");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/03");
    
      script_cve_id(
        "CVE-2015-3194",
        "CVE-2015-3195",
        "CVE-2016-0640",
        "CVE-2016-0641",
        "CVE-2016-0644",
        "CVE-2016-0646",
        "CVE-2016-0649",
        "CVE-2016-0650",
        "CVE-2016-0652",
        "CVE-2016-0653",
        "CVE-2016-0654",
        "CVE-2016-0656",
        "CVE-2016-0658",
        "CVE-2016-0661",
        "CVE-2016-0663",
        "CVE-2016-0665",
        "CVE-2016-0668",
        "CVE-2016-3452"
      );
      script_bugtraq_id(
        78623,
        78626,
        86427,
        86431,
        86436,
        86439,
        86442,
        86451,
        86454,
        86463,
        86467,
        86470,
        86496,
        86498,
        86504,
        86511,
        86513,
        91999
      );
    
      script_name(english:"Oracle MySQL 5.7.x < 5.7.11 Multiple Vulnerabilities (April 2016 CPU) (July 2016 CPU)");
      script_summary(english:"Checks the rpm output for the updated packages.");
    
      script_set_attribute(attribute:"synopsis", value:
    "The remote host is missing one or more security updates.");
      script_set_attribute(attribute:"description", value:
    "The version of Oracle MySQL installed on the remote host is 5.7.x
    prior to 5.7.11. It is, therefore, affected by the following
    vulnerabilities :
    
      - A NULL pointer dereference flaw exists in the bundled
        version of OpenSSL in file rsa_ameth.c due to improper
        handling of ASN.1 signatures that are missing the PSS
        parameter. A remote attacker can exploit this to cause
        the signature verification routine to crash, resulting
        in a denial of service condition. (CVE-2015-3194)
    
      - A flaw exists in the ASN1_TFLG_COMBINE implementation in
        file tasn_dec.c related to handling malformed
        X509_ATTRIBUTE structures. A remote attacker can exploit
        this to cause a memory leak by triggering a decoding
        failure in a PKCS#7 or CMS application, resulting in a
        denial of service. (CVE-2015-3195)
    
      - An unspecified flaw exists in the DML subcomponent that
        allows a local attacker to impact integrity and
        availability. (CVE-2016-0640)
    
      - An unspecified flaw exists in the MyISAM subcomponent
        that allows a local attacker to disclose potentially
        sensitive information or cause a denial of service
        condition. (CVE-2016-0641)
    
      - An unspecified flaw exists in the DDL subcomponent that
        allows a local attacker to cause a denial of service
        condition. (CVE-2016-0644)
    
      - Multiple unspecified flaws exist in the DML subcomponent
        that allow a local attacker to cause a denial of
        service condition. (CVE-2016-0646, CVE-2016-0652)
    
      - An unspecified flaw exists in the PS subcomponent that
        allows a local attacker to cause a denial of service
        condition. (CVE-2016-0649)
    
      - An unspecified flaw exists in the Replication
        subcomponent that allows a local attacker to cause a
        denial of service condition. (CVE-2016-0650)
    
      - An unspecified flaw exists in the FTS subcomponent that
        allows a local attacker to cause a denial of service
        condition. (CVE-2016-0653)
    
      - Multiple unspecified flaws exist in the InnoDB
        subcomponent that allow a local attacker to cause a
        denial of service condition. (CVE-2016-0654,
        CVE-2016-0656, CVE-2016-0668)
    
      - An unspecified flaw exists in the Optimizer subcomponent
        that allows a local attacker to cause a denial of
        service condition. (CVE-2016-0658)
    
      - An unspecified flaw exists in the Options subcomponent
        that allows a local attacker to cause a denial of
        service condition. (CVE-2016-0661)
    
      - An unspecified flaw exists in the Performance Schema
        subcomponent that allows a local attacker to cause a
        denial of service condition. (CVE-2016-0663)
    
      - An unspecified flaw exists in the Security: Encryption
        subcomponent that allows a local attacker to cause a
        denial of service condition. (CVE-2016-0665)
    
      - An unspecified flaw exists in the Security: Encryption
        subcomponent that allows an unauthenticated, remote
        attacker to disclose potentially sensitive information.
        (CVE-2016-3452)
    
      - A denial of service vulnerability exists in the bundled
        OpenSSL library due to improper handling of variables
        declared as TEXT or BLOB. An authenticated, remote
        attacker can exploit this to corrupt data or cause a
        denial of service condition.
    
      - A denial of service vulnerability exists that is
        triggered when handling a 'CREATE TEMPORARY TABLE ..
        SELECT' statement involving BIT columns. An
        authenticated, remote attacker can exploit this to
        create an improper table or cause the server to exit, 
        resulting in a denial of service condition.
    
      - A denial of service vulnerability exists due to improper
        handling of queries that contain 'WHERE 0'. An
        authenticated, remote attacker can exploit this to cause
        an uninitialized read, resulting in a denial of service
        condition.");
      # https://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2948264.xml
      script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?ae0f7f52");
      # http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/3089849.xml
      script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?42cde00c");
      script_set_attribute(attribute:"see_also", value:"https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-11.html");
      script_set_attribute(attribute:"see_also", value:"https://support.oracle.com/rs?type=doc&id=2120034.1");
      script_set_attribute(attribute:"see_also", value:"https://support.oracle.com/rs?type=doc&id=2157431.1");
      # https://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
      script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?ffb7b96f");
      # http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
      script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?453b5f8c");
      script_set_attribute(attribute:"solution", value:
    "Upgrade to MySQL version 5.7.11 or later.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H");
      script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
      script_set_attribute(attribute:"cvss_score_source", value:"CVE-2016-0641");
    
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2015/12/03");
      script_set_attribute(attribute:"patch_publication_date", value:"2016/04/21");
      script_set_attribute(attribute:"plugin_publication_date", value:"2016/05/02");
    
      script_set_attribute(attribute:"agent", value:"unix");
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:mysql");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:mysql");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mysql");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:mysql");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:mysql");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:mysql");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mysql");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:mysql");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mysql");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_family(english:"Databases");
    
      script_copyright(english:"This script is Copyright (C) 2016-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled");
      script_require_ports("Host/RedHat/release", "Host/AmazonLinux/release", "Host/SuSE/release", "Host/CentOS/release");
    
      exit(0);
    }
    
    include("mysql_version.inc");
    
    fix_version = "5.7.11";
    exists_version = "5.7";
    
    mysql_check_rpms(mysql_packages:default_mysql_rpm_list_server_only, fix_ver:fix_version, exists_ver:exists_version, rhel_os_list:default_mysql_rhel_os_list, centos_os_list:default_mysql_centos_os_list, suse_os_list:default_mysql_suse_os_list, ala_os_list:default_mysql_ala_os_list, severity:SECURITY_WARNING);
    
  • NASL familyFreeBSD Local Security Checks
    NASL idFREEBSD_PKG_8C2B2F110EBE11E6B55EB499BAEBFEAF.NASL
    descriptionOracle reports reports : Critical Patch Update contains 31 new security fixes for Oracle MySQL 5.5.48, 5.6.29, 5.7.11 and earlier
    last seen2020-06-01
    modified2020-06-02
    plugin id90847
    published2016-05-03
    reporterThis script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/90847
    titleFreeBSD : MySQL -- multiple vulnerabilities (8c2b2f11-0ebe-11e6-b55e-b499baebfeaf)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from the FreeBSD VuXML database :
    #
    # Copyright 2003-2019 Jacques Vidrine and contributors
    #
    # Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
    # HTML, PDF, PostScript, RTF and so forth) with or without modification,
    # are permitted provided that the following conditions are met:
    # 1. Redistributions of source code (VuXML) must retain the above
    #    copyright notice, this list of conditions and the following
    #    disclaimer as the first lines of this file unmodified.
    # 2. Redistributions in compiled form (transformed to other DTDs,
    #    published online in any format, converted to PDF, PostScript,
    #    RTF and other formats) must reproduce the above copyright
    #    notice, this list of conditions and the following disclaimer
    #    in the documentation and/or other materials provided with the
    #    distribution.
    # 
    # THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
    # AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
    # THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
    # PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
    # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
    # OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
    # OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
    # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
    # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
    # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
    # EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(90847);
      script_version("2.10");
      script_cvs_date("Date: 2019/07/10 16:04:13");
    
      script_cve_id("CVE-2015-3194", "CVE-2016-0639", "CVE-2016-0640", "CVE-2016-0641", "CVE-2016-0642", "CVE-2016-0643", "CVE-2016-0644", "CVE-2016-0646", "CVE-2016-0647", "CVE-2016-0648", "CVE-2016-0649", "CVE-2016-0650", "CVE-2016-0651", "CVE-2016-0652", "CVE-2016-0653", "CVE-2016-0654", "CVE-2016-0655", "CVE-2016-0656", "CVE-2016-0657", "CVE-2016-0658", "CVE-2016-0659", "CVE-2016-0661", "CVE-2016-0662", "CVE-2016-0663", "CVE-2016-0665", "CVE-2016-0666", "CVE-2016-0667", "CVE-2016-0668", "CVE-2016-0705", "CVE-2016-2047", "CVE-2016-3461");
      script_xref(name:"TRA", value:"TRA-2016-11");
    
      script_name(english:"FreeBSD : MySQL -- multiple vulnerabilities (8c2b2f11-0ebe-11e6-b55e-b499baebfeaf)");
      script_summary(english:"Checks for updated packages in pkg_info output");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote FreeBSD host is missing one or more security-related
    updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Oracle reports reports :
    
    Critical Patch Update contains 31 new security fixes for Oracle MySQL
    5.5.48, 5.6.29, 5.7.11 and earlier"
      );
      # http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixMSQL
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?a0defed6"
      );
      # https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/
      script_set_attribute(
        attribute:"see_also",
        value:"https://mariadb.com/kb/en/library/mariadb-5549-release-notes/"
      );
      # https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/
      script_set_attribute(
        attribute:"see_also",
        value:"https://mariadb.com/kb/en/library/mariadb-10025-release-notes/"
      );
      # https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/
      script_set_attribute(
        attribute:"see_also",
        value:"https://mariadb.com/kb/en/library/mariadb-10112-release-notes/"
      );
      # https://vuxml.freebsd.org/freebsd/8c2b2f11-0ebe-11e6-b55e-b499baebfeaf.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?1f2add4e"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://www.tenable.com/security/research/tra-2016-11"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:mariadb100-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:mariadb101-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:mariadb55-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:mysql55-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:mysql56-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:mysql57-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:percona-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:percona55-server");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:freebsd:freebsd");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2016/04/19");
      script_set_attribute(attribute:"patch_publication_date", value:"2016/04/30");
      script_set_attribute(attribute:"plugin_publication_date", value:"2016/05/03");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"FreeBSD Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("freebsd_package.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/FreeBSD/release")) audit(AUDIT_OS_NOT, "FreeBSD");
    if (!get_kb_item("Host/FreeBSD/pkg_info")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    flag = 0;
    
    if (pkg_test(save_report:TRUE, pkg:"mariadb55-server<5.5.49")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"mariadb100-server<10.0.25")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"mariadb101-server<10.1.12")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"mysql55-server<5.5.49")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"mysql56-server<5.6.30")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"mysql57-server<5.7.12")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"percona55-server<5.5.49")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"percona-server<5.6.30")) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:pkg_report_get());
      else security_hole(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");