Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mecab-ipadic-EUCJPUpgrade mysqlUpgrade mysql-commonUpgrade mecabUpgrade mysql-serverUpgrade mysql-errmsgUpgrade mysql-testUpgrade mecab-ipadicUpgrade mysql-develUpgrade mysql-libs | Oct 27, 2022 | Jan 19, 2022 |
| Centos_linux | — | Upgrade mysql-commonUpgrade mecab-debugsourceUpgrade mecab-ipadic-EUCJPUpgrade mysql-libs-debuginfoUpgrade mysql-libsUpgrade mysql-debuginfoUpgrade mysql-serverUpgrade mysqlUpgrade mysql-debugsourceUpgrade mecab-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-develUpgrade mecab-ipadicUpgrade mysql-server-debuginfoUpgrade mysql-testUpgrade mecabUpgrade mysql-errmsgUpgrade mysql-devel-debuginfo | Oct 26, 2022 | Jan 19, 2022 |
| Freebsd | — | Upgrade mysql-server55Upgrade mysql-server56Upgrade mysql-server57Upgrade mysql-connector-java51Upgrade mysql-server80Upgrade mysql-connector-odbcUpgrade mysql-connector-c++Upgrade mysql-connector-java | Nov 4, 2022 | Jan 19, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.28 | Jan 26, 2022 | Jan 19, 2022 |
| Oracle_linux | — | Upgrade mysqlUpgrade mysql-errmsgUpgrade mecabUpgrade mecab-ipadicUpgrade mysql-testUpgrade mysql-libsUpgrade mysql-commonUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mysql-devel | Oct 27, 2022 | Jan 18, 2022 |
| Redhat_linux | — | Upgrade mysql-serverUpgrade mecabUpgrade mysql-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql-commonUpgrade mecab-debugsourceUpgrade mecab-ipadic-EUCJPUpgrade mysqlUpgrade mecab-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-testUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade mysql-debugsourceUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade mysql-devel | Oct 26, 2022 | Jan 19, 2022 |
| Rocky_linux | — | Upgrade mecab-ipadic-EUCJPUpgrade mysql-develUpgrade mysql-libs-debuginfoUpgrade mysql-server-debuginfoUpgrade mysqlUpgrade mecab-ipadicUpgrade mysql-debuginfoUpgrade mecab-debugsourceUpgrade mecabUpgrade mysql-devel-debuginfoUpgrade mecab-debuginfoUpgrade mysql-serverUpgrade mysql-debugsourceUpgrade mysql-commonUpgrade mysql-errmsgUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade mysql-test | Mar 12, 2024 | Jan 19, 2022 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server-5.7 | Mar 22, 2023 | Jan 19, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 19, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub