Oracle MySQL Server <= 5.7.38 / 8.0 <= 8.0.29 Security Update (cpujul2022) - Linux
🗓️ 21 Jul 2022 00:00:00Reported by Copyright (C) 2022 Greenbone AGType
openvas🔗 plugins.openvas.org👁 36 Views
| Reporter | Title | Published | Views | Family All 1605 |
|---|---|---|---|---|
| USN-5359-2 rsync vulnerability | 13 Jun 202217:50 | – | osv | |
| USN-5402-1 openssl, openssl1.0 vulnerabilities | 4 May 202213:21 | – | osv | |
| USN-5402-2 openssl vulnerabilities | 26 May 202213:34 | – | osv | |
| USN-5537-1 mysql-5.7, mysql-8.0 vulnerabilities | 28 Jul 202213:45 | – | osv | |
| USN-5537-2 mysql-5.7 vulnerability | 28 Jul 202219:47 | – | osv | |
| USN-5739-1 mariadb-10.3, mariadb-10.6 vulnerabilities | 23 Nov 202216:27 | – | osv | |
| USN-6457-1 nodejs vulnerabilities | 30 Oct 202310:06 | – | osv | |
| USN-6736-1 klibc vulnerabilities | 16 Apr 202411:43 | – | osv | |
| USN-6736-2 klibc vulnerabilities | 23 May 202409:28 | – | osv | |
| USN-7018-1 openssl vulnerabilities | 18 Sep 202400:38 | – | osv |
10
| Source | Link |
|---|---|
| oracle | www.oracle.com/security-alerts/cpujul2022.html |
# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
CPE = "cpe:/a:oracle:mysql";
if (description)
{
script_oid("1.3.6.1.4.1.25623.1.0.148510");
script_version("2025-09-09T05:38:49+0000");
script_tag(name:"last_modification", value:"2025-09-09 05:38:49 +0000 (Tue, 09 Sep 2025)");
script_tag(name:"creation_date", value:"2022-07-21 05:14:24 +0000 (Thu, 21 Jul 2022)");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2025-08-11 17:19:56 +0000 (Mon, 11 Aug 2025)");
script_cve_id("CVE-2022-1292", "CVE-2022-27778", "CVE-2018-25032", "CVE-2022-21515");
script_tag(name:"qod_type", value:"remote_banner_unreliable");
script_tag(name:"solution_type", value:"VendorFix");
script_name("Oracle MySQL Server <= 5.7.38 / 8.0 <= 8.0.29 Security Update (cpujul2022) - Linux");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2022 Greenbone AG");
script_family("Databases");
script_dependencies("gb_mysql_mariadb_remote_detect.nasl", "os_detection.nasl");
script_mandatory_keys("oracle/mysql/detected", "Host/runs_unixoide");
script_tag(name:"summary", value:"Oracle MySQL Server is prone to multiple vulnerabilities.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"affected", value:"Oracle MySQL Server version 5.7.38 and prior and 8.0 through
8.0.29.");
script_tag(name:"solution", value:"Update to version 5.7.39, 8.0.30 or later.");
script_xref(name:"URL", value:"https://www.oracle.com/security-alerts/cpujul2022.html#AppendixMSQL");
script_xref(name:"Advisory-ID", value:"cpujul2022");
exit(0);
}
include("host_details.inc");
include("version_func.inc");
if (isnull(port = get_app_port(cpe: CPE)))
exit(0);
if (!infos = get_app_version_and_location(cpe: CPE, port: port, exit_no_version: TRUE))
exit(0);
version = infos["version"];
location = infos["location"];
if (version_is_less_equal(version: version, test_version: "5.7.38")) {
report = report_fixed_ver(installed_version: version, fixed_version: "5.7.39", install_path: location);
security_message(port: port, data: report);
exit(0);
}
else if (version_in_range(version: version, test_version: "8.0", test_version2: "8.0.29")) {
report = report_fixed_ver(installed_version: version, fixed_version: "8.0.30", install_path: location);
security_message(port: port, data: report);
exit(0);
}
exit(99);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Sep 2025 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 210
CVSS 3.18.1 - 9.8
EPSS0.82612
SSVC