Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-testUpgrade mecab-ipadicUpgrade mysql-libsUpgrade mysql-develUpgrade mysqlUpgrade mysql-serverUpgrade mysql-commonUpgrade mysql-errmsgUpgrade mecab-ipadic-EUCJPUpgrade mecab | May 4, 2022 | Jul 21, 2021 |
| Amazon_linux | — | Upgrade mysql57 | Nov 5, 2021 | Jul 21, 2021 |
| Centos_linux | — | Upgrade mysqlUpgrade mysql-develUpgrade mysql-server-debuginfoUpgrade mysql-testUpgrade mysql-errmsgUpgrade mecab-ipadic-EUCJPUpgrade mysql-test-debuginfoUpgrade mecab-ipadicUpgrade mysql-libsUpgrade mysql-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql-debugsourceUpgrade mysql-serverUpgrade mecabUpgrade mysql-commonUpgrade mecab-debugsourceUpgrade mysql-devel-debuginfoUpgrade mecab-debuginfo | Sep 22, 2021 | Jul 21, 2021 |
| Freebsd | — | Upgrade mariadb105-serverUpgrade mysql57-serverUpgrade mariadb103-serverUpgrade mysql80-serverUpgrade mariadb104-server | Nov 4, 2022 | Jul 20, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.26Upgrade to MySQL version 5.7.35 | Jul 26, 2021 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade database/mysql-57/embedded to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4 | Nov 17, 2021 | Jul 21, 2021 |
| Oracle_linux | — | Upgrade mysql-libsUpgrade mysql-testUpgrade mysql-commonUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mecab-ipadicUpgrade mysql-develUpgrade mecabUpgrade mysql-errmsgUpgrade mysql | Sep 23, 2021 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade mysql-debugsourceUpgrade mecab-debugsourceUpgrade mysql-errmsgUpgrade mysql-serverUpgrade mysql-testUpgrade mysql-devel-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecabUpgrade mysqlUpgrade mysql-develUpgrade mysql-commonUpgrade mysql-test-debuginfoUpgrade mysql-debuginfoUpgrade mecab-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-server-debuginfoUpgrade mysql-libsUpgrade mecab-ipadic | Sep 22, 2021 | Jul 21, 2021 |
| Rocky_linux | — | Upgrade mecabUpgrade mysql-devel-debuginfoUpgrade mysql-errmsgUpgrade mecab-debugsourceUpgrade mecab-ipadicUpgrade mysql-develUpgrade mysql-commonUpgrade mysql-libs-debuginfoUpgrade mysql-server-debuginfoUpgrade mysqlUpgrade mysql-debuginfoUpgrade mysql-debugsourceUpgrade mecab-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-testUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade mysql-server | May 5, 2022 | Jul 21, 2021 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server-5.7 | Jul 27, 2021 | Jul 21, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub