Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-commonUpgrade mecab-ipadicUpgrade mysqlUpgrade mysql-errmsgUpgrade mecabUpgrade mecab-ipadic-EUCJPUpgrade mysql-testUpgrade mysql-serverUpgrade mysql-libsUpgrade mysql-devel | Oct 27, 2022 | Oct 20, 2021 |
| Centos_linux | — | Upgrade mysql-server-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mysql-develUpgrade mysql-errmsgUpgrade mysqlUpgrade mysql-testUpgrade mecab-ipadicUpgrade mysql-debuginfoUpgrade mysql-commonUpgrade mecab-debugsourceUpgrade mecab-debuginfoUpgrade mysql-devel-debuginfoUpgrade mecabUpgrade mysql-libs-debuginfoUpgrade mysql-debugsourceUpgrade mysql-serverUpgrade mysql-test-debuginfo | Oct 26, 2022 | Oct 20, 2021 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mysql57-serverUpgrade mysql80-clientUpgrade mysql80-serverUpgrade mariadb104-serverUpgrade mysql-connector-javaUpgrade mariadb105-server | Nov 4, 2022 | Oct 17, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.27 | Nov 26, 2021 | Oct 20, 2021 |
| Oracle_linux | — | Upgrade mysql-commonUpgrade mysql-develUpgrade mecabUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mysql-testUpgrade mecab-ipadicUpgrade mysql-libsUpgrade mysqlUpgrade mysql-errmsg | Oct 27, 2022 | Oct 19, 2021 |
| Redhat_linux | — | Upgrade mecabUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mecab-debugsourceUpgrade mysql-debugsourceUpgrade mysql-test-debuginfoUpgrade mecab-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql-develUpgrade mysqlUpgrade mysql-libsUpgrade mecab-ipadicUpgrade mysql-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-errmsgUpgrade mysql-commonUpgrade mysql-testUpgrade mysql-libs-debuginfo | Oct 26, 2022 | Oct 20, 2021 |
| Rocky_linux | — | Upgrade mecab-ipadicUpgrade mecab-ipadic-EUCJPUpgrade mysql-server-debuginfoUpgrade mysql-debugsourceUpgrade mysql-develUpgrade mecabUpgrade mysql-errmsgUpgrade mysqlUpgrade mecab-debugsourceUpgrade mysql-testUpgrade mysql-libs-debuginfoUpgrade mecab-debuginfoUpgrade mysql-libsUpgrade mysql-debuginfoUpgrade mysql-serverUpgrade mysql-commonUpgrade mysql-devel-debuginfoUpgrade mysql-test-debuginfo | Mar 12, 2024 | Oct 20, 2021 |
| Ubuntu | — | Upgrade mysql-server-5.7Upgrade mysql-server-8.0 | Oct 26, 2021 | Oct 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub