Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:USN-5022-1
HistoryJul 26, 2021 - 2:12 p.m.

mysql-5.7, mysql-8.0 vulnerabilities

2021-07-2614:12:27
Google
osv.dev
1

6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

5.1 Medium

AI Score

Confidence

High

8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:P/I:P/A:C

0.269 Low

EPSS

Percentile

96.7%

JSON

Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.26 in Ubuntu 20.04 LTS and Ubuntu 21.04.
Ubuntu 18.04 LTS has been updated to MySQL 5.7.35.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-35.html
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-26.html
https://www.oracle.com/security-alerts/cpujul2021.html

References

Related

ubuntu 3
openvas 21
nessus 22
ibm 1
fedora 4
freebsd 1
amazon 1
photon 6
suse 3
mageia 1
osv 16
redhatcve 16
cnvd 14
prion 15
veracode 16
debiancve 16
cve 16
ubuntucve 15
cbl_mariner 12
ubuntu
ubuntu
MySQL vulnerabilities
2021-07-26 00:00:00
MariaDB vulnerabilities
2021-08-13 00:00:00
MySQL vulnerabilities
2021-10-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5022-1)
2021-07-27 00:00:00
Oracle MySQL Server 8.0 <= 8.0.25 Security Update (cpujul2021) - Windows
2021-07-22 00:00:00
Oracle MySQL Server 8.0 <= 8.0.25 Security Update (cpujul2021) - Linux
2021-07-22 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-5022-1)
2021-07-26 00:00:00
FreeBSD : MySQL -- Multiple vulnerabilities (38a4a043-e937-11eb-9b84-d4c9ef517024)
2021-07-21 00:00:00
MySQL 8.0.x < 8.0.26 Multiple Vulnerabilities (Jul 2021 CPU)
2021-07-22 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by an Oracle MySQL vulnerability
2021-11-05 14:49:08
fedora
fedora
[SECURITY] Fedora 33 Update: community-mysql-8.0.26-1.fc33
2021-08-25 20:05:25
[SECURITY] Fedora 34 Update: community-mysql-8.0.26-1.fc34
2021-08-25 19:58:48
[SECURITY] Fedora 35 Update: mariadb-10.5.13-1.fc35
2021-12-11 01:33:38
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2021-07-20 00:00:00
amazon
amazon
Medium: mysql57
2021-10-29 16:27:00
photon
photon
Critical Photon OS Security Update - PHSA-2021-0281
2021-08-09 00:00:00
Critical Photon OS Security Update - PHSA-2021-0077
2021-08-09 00:00:00
Critical Photon OS Security Update - PHSA-2021-4.0-0077
2021-08-10 00:00:00
suse
suse
Security update for mariadb (moderate)
2021-09-03 00:00:00
Security update for mariadb (moderate)
2021-08-25 00:00:00
Security update for mariadb (moderate)
2021-08-25 00:00:00
mageia
mageia
Updated mariadb packages fix security vulnerabilities
2021-08-14 17:00:09
osv
osv
mariadb-10.3, mariadb-10.5 vulnerabilities
2021-08-13 13:03:44
mysql-5.7 vulnerabilities
2021-10-07 16:48:49
CVE-2021-2387
2021-07-21 15:15:40
redhatcve
redhatcve
CVE-2021-2387
2021-08-10 21:50:35
CVE-2021-2340
2021-08-10 21:20:25
CVE-2021-2399
2021-08-10 21:50:25
cnvd
cnvd
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-54378)
2021-07-21 00:00:00
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-54025)
2021-07-21 00:00:00
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-54392)
2021-07-21 00:00:00
prion
prion
Code injection
2021-07-21 15:15:00
Code injection
2021-07-21 15:16:00
Code injection
2021-07-21 15:15:00
veracode
veracode
Denial Of Service (DoS)
2021-10-18 14:27:59
Denial Of Service (DoS)
2021-10-18 14:28:05
Denial Of Service (DoS)
2021-10-18 14:27:56
debiancve
debiancve
CVE-2021-2387
2021-07-21 15:15:00
CVE-2021-2441
2021-07-21 15:16:00
CVE-2021-2352
2021-07-21 15:15:00
cve
cve
CVE-2021-2387
2021-07-21 15:15:00
CVE-2021-2340
2021-07-21 15:15:00
CVE-2021-2399
2021-07-21 15:15:00
ubuntucve
ubuntucve
CVE-2021-2387
2021-07-21 00:00:00
CVE-2021-2418
2021-07-21 00:00:00
CVE-2021-2354
2021-07-21 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-2354 affecting package mysql 8.0.24-1
2021-08-25 19:57:27
CVE-2021-2357 affecting package mysql 8.0.24-1
2021-08-25 19:57:27
CVE-2021-2340 affecting package mysql 8.0.24-1
2021-08-25 19:57:27

6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

5.1 Medium

AI Score

Confidence

High

8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:P/I:P/A:C

0.269 Low

EPSS

Percentile

96.7%

JSON
Related for OSV:USN-5022-1
ubuntu3openvas21nessus22ibm1fedora4freebsd1amazon1photon6suse3mageia1osv16redhatcve16cnvd14prion15veracode16debiancve16cve16ubuntucve15cbl_mariner12