Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-testUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mecabUpgrade mysqlUpgrade mysql-develUpgrade mysql-commonUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-server | Oct 20, 2022 | Apr 19, 2022 |
| Centos_linux | — | Upgrade mysql-debuginfoUpgrade mecab-ipadicUpgrade mysql-debugsourceUpgrade mysqlUpgrade mysql-commonUpgrade mysql-testUpgrade mysql-server-debuginfoUpgrade mecabUpgrade mysql-errmsgUpgrade mecab-debugsourceUpgrade mysql-serverUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-test-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecab-debuginfoUpgrade mysql-develUpgrade mysql-devel-debuginfo | Oct 20, 2022 | Apr 19, 2022 |
| Freebsd | — | Upgrade mysql57-serverUpgrade mysql80-serverUpgrade mysql80-client | Nov 4, 2022 | Apr 16, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.30Upgrade to MySQL version 5.7.38 | Apr 29, 2022 | Apr 19, 2022 |
| Oracle_linux | — | Upgrade mysql-serverUpgrade mecabUpgrade mysql-errmsgUpgrade mysqlUpgrade mysql-develUpgrade mysql-testUpgrade mecab-ipadicUpgrade mysql-libsUpgrade mysql-commonUpgrade mecab-ipadic-EUCJP | Sep 22, 2022 | Apr 19, 2022 |
| Redhat_linux | — | Upgrade mysql-testUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mysql-devel-debuginfoUpgrade mecabUpgrade mysql-debugsourceUpgrade mysqlUpgrade mecab-debuginfoUpgrade mysql-develUpgrade mysql-test-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql-server-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-debuginfoUpgrade mysql-libsUpgrade mysql-commonUpgrade mecab-debugsourceUpgrade mysql-server | Oct 20, 2022 | Apr 19, 2022 |
| Rocky_linux | — | Upgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mecab-ipadicUpgrade mysql-develUpgrade mysqlUpgrade mysql-debugsourceUpgrade mysql-server-debuginfoUpgrade mysql-errmsgUpgrade mysql-commonUpgrade mecab-debuginfoUpgrade mecabUpgrade mysql-libs-debuginfoUpgrade mysql-debuginfoUpgrade mysql-serverUpgrade mysql-testUpgrade mysql-devel-debuginfoUpgrade mecab-debugsourceUpgrade mysql-test-debuginfo | Mar 12, 2024 | Apr 19, 2022 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server-5.7 (Ubuntu Pro)Upgrade mysql-server-5.7 | May 4, 2022 | Apr 19, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 19, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub