Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-errmsgUpgrade mysql-develUpgrade mecab-ipadicUpgrade mysql-testUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mysql-serverUpgrade mecabUpgrade mysqlUpgrade mysql-common | Oct 27, 2022 | Oct 20, 2021 |
| Centos_linux | — | Upgrade mysql-testUpgrade mysqlUpgrade mysql-serverUpgrade mysql-devel-debuginfoUpgrade mysql-develUpgrade mysql-debugsourceUpgrade mysql-server-debuginfoUpgrade mecabUpgrade mecab-debuginfoUpgrade mysql-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecab-ipadicUpgrade mysql-test-debuginfoUpgrade mecab-debugsourceUpgrade mysql-commonUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mysql-errmsg | Oct 26, 2022 | Oct 20, 2021 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mysql80-clientUpgrade mysql57-serverUpgrade mysql80-serverUpgrade mariadb105-serverUpgrade mariadb103-serverUpgrade mysql-connector-java | Nov 4, 2022 | Oct 17, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.27 | Nov 26, 2021 | Oct 20, 2021 |
| Oracle_linux | — | Upgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mysql-develUpgrade mecabUpgrade mysql-commonUpgrade mysqlUpgrade mecab-ipadicUpgrade mysql-testUpgrade mysql-errmsg | Oct 27, 2022 | Oct 19, 2021 |
| Redhat_linux | — | Upgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-devel-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-test-debuginfoUpgrade mecabUpgrade mysql-debugsourceUpgrade mysql-develUpgrade mysql-debuginfoUpgrade mecab-ipadicUpgrade mysqlUpgrade mysql-libsUpgrade mysql-testUpgrade mecab-debugsourceUpgrade mecab-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql-commonUpgrade mysql-errmsg | Oct 26, 2022 | Oct 20, 2021 |
| Rocky_linux | — | Upgrade mysql-libs-debuginfoUpgrade mysql-develUpgrade mecab-debugsourceUpgrade mysql-errmsgUpgrade mysqlUpgrade mysql-testUpgrade mysql-devel-debuginfoUpgrade mecabUpgrade mysql-serverUpgrade mysql-debugsourceUpgrade mecab-ipadic-EUCJPUpgrade mysql-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-commonUpgrade mecab-ipadicUpgrade mysql-server-debuginfoUpgrade mysql-libsUpgrade mecab-debuginfo | Mar 12, 2024 | Oct 20, 2021 |
| Ubuntu | — | Upgrade mysql-server-5.7Upgrade mysql-server-8.0 | Oct 26, 2021 | Oct 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub