FreeBSDC9387E4D-2F5F-11EC-8BE6-D4C9EF517024MySQL -- Multiple vulnerabilities
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.9 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:N/A:C
0.086 Low
EPSS
Percentile
94.4%
Oracle reports:
This Critical Patch Update contains 66 new security patches for
Oracle MySQL. 8 of these vulnerabilities may be remotely exploitable
without authentication, i.e., may be exploited over a network without
requiring user credentials.
The highest CVSS v3.1 Base Score of vulnerabilities affecting Oracle
MySQL is 9.8.
Note: MariaDB only vulnerable against CVE-2021-35604
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | mysql57-server | < 5.7.36 | UNKNOWN |
| FreeBSD | any | noarch | mysql80-client | < 8.0.27 | UNKNOWN |
| FreeBSD | any | noarch | mysql-connector-java | < 8.0.27 | UNKNOWN |
| FreeBSD | any | noarch | mysql80-server | < 8.0.27 | UNKNOWN |
| FreeBSD | any | noarch | mariadb103-server | < 10.3.32 | UNKNOWN |
| FreeBSD | any | noarch | mariadb104-server | < 10.4.22 | UNKNOWN |
| FreeBSD | any | noarch | mariadb105-server | < 10.5.13 | UNKNOWN |
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.9 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:N/A:C
0.086 Low
EPSS
Percentile
94.4%