Oracle MySQL Server <= 5.7.35 / 8.0 <= 8.0.26 Security Update (cpuoct2021) - Linux
🗓️ 22 Oct 2021 00:00:00Reported by Copyright (C) 2021 Greenbone AGType
openvas🔗 plugins.openvas.org👁 37 Views
| Reporter | Title | Published | Views | Family All 1779 |
|---|---|---|---|---|
| CVE-2021-22924 | 5 Aug 202121:15 | – | osv | |
| CVE-2021-22925 | 5 Aug 202121:15 | – | osv | |
| CVE-2021-22926 | 5 Aug 202121:15 | – | osv | |
| CVE-2021-22945 | 23 Sep 202113:15 | – | osv | |
| CVE-2021-22946 | 29 Sep 202120:15 | – | osv | |
| CVE-2021-22947 | 29 Sep 202120:15 | – | osv | |
| DEBIAN-CVE-2021-22922 | 5 Aug 202121:15 | – | osv | |
| DEBIAN-CVE-2021-22923 | 5 Aug 202121:15 | – | osv | |
| DEBIAN-CVE-2021-22924 | 5 Aug 202121:15 | – | osv | |
| DEBIAN-CVE-2021-22945 | 23 Sep 202113:15 | – | osv |
10
| Source | Link |
|---|---|
| oracle | www.oracle.com/security-alerts/cpuoct2021.html |
# SPDX-FileCopyrightText: 2021 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
CPE = "cpe:/a:oracle:mysql";
if (description)
{
script_oid("1.3.6.1.4.1.25623.1.0.117740");
script_version("2025-09-09T05:38:49+0000");
script_tag(name:"last_modification", value:"2025-09-09 05:38:49 +0000 (Tue, 09 Sep 2025)");
script_tag(name:"creation_date", value:"2021-10-22 07:55:48 +0000 (Fri, 22 Oct 2021)");
script_tag(name:"cvss_base", value:"7.5");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2021-08-31 16:37:00 +0000 (Tue, 31 Aug 2021)");
# nb: From the vendor advisory:
# The patch for CVE-2021-22926 also addresses CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925, CVE-2021-22945, CVE-2021-22946 and CVE-2021-22947.
# The patch for CVE-2021-3711 also addresses CVE-2021-3712.
script_cve_id("CVE-2021-3711", "CVE-2021-22926", "CVE-2021-35604", "CVE-2021-35624", "CVE-2021-22922",
"CVE-2021-22923", "CVE-2021-22924", "CVE-2021-22925", "CVE-2021-22945", "CVE-2021-22946",
"CVE-2021-22947", "CVE-2021-3712");
script_tag(name:"qod_type", value:"remote_banner_unreliable");
script_tag(name:"solution_type", value:"VendorFix");
script_name("Oracle MySQL Server <= 5.7.35 / 8.0 <= 8.0.26 Security Update (cpuoct2021) - Linux");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2021 Greenbone AG");
script_family("Databases");
script_dependencies("gb_mysql_mariadb_remote_detect.nasl", "os_detection.nasl");
script_mandatory_keys("oracle/mysql/detected", "Host/runs_unixoide");
script_tag(name:"summary", value:"Oracle MySQL Server is prone to multiple vulnerabilities.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"affected", value:"Oracle MySQL Server version 5.7.35 and prior and 8.0 through 8.0.26.");
script_tag(name:"solution", value:"Update to version 5.7.36, 8.0.27 or later.");
script_xref(name:"URL", value:"https://www.oracle.com/security-alerts/cpuoct2021.html#AppendixMSQL");
script_xref(name:"Advisory-ID", value:"cpuoct2021");
exit(0);
}
include("host_details.inc");
include("version_func.inc");
if (isnull(port = get_app_port(cpe: CPE)))
exit(0);
if (!infos = get_app_version_and_location(cpe: CPE, port: port, exit_no_version: TRUE))
exit(0);
version = infos["version"];
location = infos["location"];
if (version_is_less_equal(version: version, test_version: "5.7.35")) {
report = report_fixed_ver(installed_version: version, fixed_version: "5.7.36", install_path: location);
security_message(port: port, data: report);
exit(0);
}
else if (version_in_range(version: version, test_version: "8.0", test_version2: "8.0.26")) {
report = report_fixed_ver(installed_version: version, fixed_version: "8.0.27", install_path: location);
security_message(port: port, data: report);
exit(0);
}
exit(99);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Sep 2025 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS 27.5
CVSS 3.19.1 - 9.8
EPSS0.87816
SSVC