Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-testUpgrade mecab-ipadicUpgrade mysql-libsUpgrade mysql-develUpgrade mysql-errmsgUpgrade mysql-commonUpgrade mysqlUpgrade mecabUpgrade mysql-serverUpgrade mecab-ipadic-EUCJP | May 4, 2022 | Jul 21, 2021 |
| Amazon_linux | — | Upgrade mysql57 | Nov 5, 2021 | Jul 21, 2021 |
| Centos_linux | — | Upgrade mecab-debugsourceUpgrade mysql-debuginfoUpgrade mecabUpgrade mysql-commonUpgrade mecab-debuginfoUpgrade mysql-serverUpgrade mysql-debugsourceUpgrade mysql-libs-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysqlUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mysql-testUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade mysql-test-debuginfoUpgrade mysql-develUpgrade mysql-server-debuginfo | Sep 22, 2021 | Jul 21, 2021 |
| Freebsd | — | Upgrade mysql57-serverUpgrade mariadb105-serverUpgrade mariadb103-serverUpgrade mariadb104-serverUpgrade mysql80-server | Nov 4, 2022 | Jul 20, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.26Upgrade to MySQL version 5.7.35 | Jul 26, 2021 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade database/mysql-57/embedded to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4 | Nov 17, 2021 | Jul 21, 2021 |
| Oracle_linux | — | Upgrade mecab-ipadicUpgrade mysqlUpgrade mysql-errmsgUpgrade mecabUpgrade mysql-develUpgrade mysql-serverUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mysql-test | Sep 23, 2021 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade mysql-libs-debuginfoUpgrade mysqlUpgrade mysql-errmsgUpgrade mysql-testUpgrade mysql-serverUpgrade mysql-debugsourceUpgrade mecab-debugsourceUpgrade mysql-devel-debuginfoUpgrade mysql-develUpgrade mecabUpgrade mysql-debuginfoUpgrade mecab-ipadicUpgrade mecab-debuginfoUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mysql-server-debuginfoUpgrade mysql-test-debuginfo | Sep 22, 2021 | Jul 21, 2021 |
| Rocky_linux | — | Upgrade mecab-ipadic-EUCJPUpgrade mysql-testUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade mysql-serverUpgrade mecab-debuginfoUpgrade mysql-debuginfoUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mecab-debugsourceUpgrade mysql-develUpgrade mecabUpgrade mysql-server-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql-commonUpgrade mysql-debugsourceUpgrade mysql-devel-debuginfoUpgrade mysql | May 5, 2022 | Jul 21, 2021 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server-5.7 | Jul 27, 2021 | Jul 21, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub