Errata overview
Errata ID 267
Date 2019-09-11
Source package mariadb-10.1
Fixed in version 10.1.41-0+deb9u1
Description
This update addresses the following issues:
* Difficult to exploit vulnerability allows high privileged attacker with
  network access via multiple protocols to compromise MySQL Server.
  Successful attacks of this vulnerability can result in unauthorized ability
  to cause a hang or frequently repeatable crash (complete DOS) of MySQL
  Server. (CVE-2019-2614)
* Easily exploitable vulnerability allows high privileged attacker with
  network access via multiple protocols to compromise MySQL Server.
  Successful attacks of this vulnerability can result in unauthorized ability
  to cause a hang or frequently repeatable crash (complete DOS) of MySQL
  Server. (CVE-2019-2627)
* Easily exploitable vulnerability allows high privileged attacker with
  network access via multiple protocols to compromise MySQL Server.
  Successful attacks of this vulnerability can result in unauthorized ability
  to cause a hang or frequently repeatable crash (complete DOS) of MySQL
  Server. (CVE-2019-2737)
* Easily exploitable vulnerability allows high privileged attacker with logon
  to the infrastructure where MySQL Server executes to compromise MySQL
  Server. Successful attacks of this vulnerability can result in unauthorized
  ability to cause a hang or frequently repeatable crash (complete DOS) of
  MySQL Server as well as unauthorized update, insert or delete access to
  some of MySQL Server accessible data. (CVE-2019-2739)
* Easily exploitable vulnerability allows low privileged attacker with
  network access via multiple protocols to compromise MySQL Server.
  Successful attacks of this vulnerability can result in unauthorized ability
  to cause a hang or frequently repeatable crash (complete DOS) of MySQL
  Server. (CVE-2019-2740)
* Easily exploitable vulnerability allows low privileged attacker with
  network access via multiple protocols to compromise MySQL Server.
  Successful attacks of this vulnerability can result in unauthorized ability
  to cause a hang or frequently repeatable crash (complete DOS) of MySQL
  Server. (CVE-2019-2805)
Additional notes
CVE ID CVE-2019-2614
CVE-2019-2627
CVE-2019-2737
CVE-2019-2739
CVE-2019-2740
CVE-2019-2805
UCS Bug number #50139