7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.02 Low
EPSS
Percentile
88.8%
MySQL is a popular multi-threaded, multi-user SQL server.
Multiple vulnerabilities have been reported in MySQL:
An authenticated remote attacker could exploit the first vulnerability to overwrite MySQL system tables and escalate privileges, or use the second vulnerability to gain privileges via an βALTER VIEWβ statement. Remote federated MySQL servers could cause a Denial of Service in the local MySQL server by exploiting the third vulnerability.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/mysql-5.0.54"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | dev-db/mysql | <Β 5.0.54 | UNKNOWN |