advisories/24743.adv

type: security
subject: Updated mariadb packages fix security vulnerability
CVE:
 - CVE-2019-2614
 - CVE-2019-2627
src:
  6:
   core:
     - mariadb-10.1.39-1.mga6
description: |
  Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
  Server: Replication). Difficult to exploit vulnerability allows high
  privileged attacker with network access via multiple protocols to
  compromise MariaDB Server. Successful attacks of this vulnerability can
  result in unauthorized ability to cause a hang or frequently repeatable
  crash (complete DOS) of MariaDB Server (CVE-2019-2614).

  Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
  Server: Security: Privileges). Easily exploitable vulnerability allows
  high privileged attacker with network access via multiple protocols to
  compromise MariaDB Server. Successful attacks of this vulnerability can
  result in unauthorized ability to cause a hang or frequently repeatable
  crash (complete DOS) of MariaDB Server (CVE-2019-2627).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24743
 - https://mariadb.com/kb/en/library/mariadb-10139-release-notes/
 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixMSQL
ID: MGASA-2019-0181
1	type: security
2	subject: Updated mariadb packages fix security vulnerability
3	CVE:
4	- CVE-2019-2614
5	- CVE-2019-2627
6	src:
7	6:
8	core:
9	- mariadb-10.1.39-1.mga6
10	description: \|
11	Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
12	Server: Replication). Difficult to exploit vulnerability allows high
13	privileged attacker with network access via multiple protocols to
14	compromise MariaDB Server. Successful attacks of this vulnerability can
15	result in unauthorized ability to cause a hang or frequently repeatable
16	crash (complete DOS) of MariaDB Server (CVE-2019-2614).
17
18	Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
19	Server: Security: Privileges). Easily exploitable vulnerability allows
20	high privileged attacker with network access via multiple protocols to
21	compromise MariaDB Server. Successful attacks of this vulnerability can
22	result in unauthorized ability to cause a hang or frequently repeatable
23	crash (complete DOS) of MariaDB Server (CVE-2019-2627).
24	references:
25	- https://bugs.mageia.org/show_bug.cgi?id=24743
26	- https://mariadb.com/kb/en/library/mariadb-10139-release-notes/
27	- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixMSQL
28	ID: MGASA-2019-0181