Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:USN-5123-1
HistoryOct 25, 2021 - 12:56 p.m.

mysql-5.7, mysql-8.0 vulnerabilities

2021-10-2512:56:42
Google
osv.dev
5

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

5.5 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

69.0%

JSON

Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.27 in Ubuntu 20.04 LTS, Ubuntu 21.04, and
Ubuntu 21.10. Ubuntu 18.04 LTS has been updated to MySQL 5.7.36.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-36.html
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-27.html
https://www.oracle.com/security-alerts/cpuoct2021.html

References

Related

openvas 7
ubuntu 2
nessus 11
fedora 3
photon 3
freebsd 1
ibm 1
osv 22
almalinux 1
oraclelinux 1
redhat 2
rocky 1
debiancve 15
ubuntucve 20
veracode 13
cnvd 21
cve 15
prion 20
cbl_mariner 27
redhatcve 13
openvas
openvas
Ubuntu: Security Advisory (USN-5123-1)
2021-10-26 00:00:00
Oracle MySQL Server 8.0 <= 8.0.26 Security Update (cpuoct2021) - Linux
2021-10-22 00:00:00
Oracle MySQL Server 8.0 <= 8.0.26 Security Update (cpuoct2021) - Windows
2021-10-22 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2021-10-25 00:00:00
MySQL vulnerabilities
2021-10-25 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-5123-1)
2021-10-26 00:00:00
Photon OS 3.0: Mysql PHSA-2021-3.0-0327
2021-11-12 00:00:00
MySQL 8.0.x < 8.0.27 Multiple Vulnerabilities (Oct 2021 CPU)
2021-10-20 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: community-mysql-8.0.27-1.fc34
2021-11-10 08:16:41
[SECURITY] Fedora 33 Update: community-mysql-8.0.27-1.fc33
2021-11-10 02:33:23
[SECURITY] Fedora 35 Update: community-mysql-8.0.27-1.fc35
2021-11-10 02:55:22
photon
photon
Important Photon OS Security Update - PHSA-2021-3.0-0327
2021-11-10 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0119
2021-10-27 00:00:00
Important Photon OS Security Update - PHSA-2021-0119
2021-10-27 00:00:00
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2021-10-16 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2022-05-12 14:14:41
osv
osv
mysql-5.7 vulnerabilities
2021-10-25 15:05:29
Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 00:00:00
Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 07:30:28
almalinux
almalinux
Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 00:00:00
oraclelinux
oraclelinux
mysql:8.0 security, bug fix, and enhancement update
2022-10-27 00:00:00
redhat
redhat
(RHSA-2022:7119) Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 07:30:28
(RHSA-2022:6518) Moderate: rh-mysql80-mysql security, bug fix, and enhancement update
2022-09-14 12:59:54
rocky
rocky
mysql:8.0 security, bug fix, and enhancement update
2022-10-25 07:30:28
debiancve
debiancve
CVE-2021-35613
2021-10-20 11:17:00
CVE-2021-35584
2021-10-20 11:16:00
CVE-2021-35591
2021-10-20 11:17:00
ubuntucve
ubuntucve
CVE-2021-35613
2021-10-20 00:00:00
CVE-2021-35584
2021-10-20 00:00:00
CVE-2021-35546
2021-10-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-10 00:24:37
Denial Of Service (DoS)
2022-11-10 00:24:26
Information Disclosure
2022-11-10 00:25:31
cnvd
cnvd
Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-17695)
2021-10-22 00:00:00
Oracle MySQL Server has an unspecified vulnerability (CNVD-2021-81782)
2021-10-20 00:00:00
Oracle MySQL Server has an unspecified vulnerability (CNVD-2021-81786)
2021-10-20 00:00:00
cve
cve
CVE-2021-35613
2021-10-20 11:17:00
CVE-2021-35602
2021-10-20 11:17:00
CVE-2021-35546
2021-10-20 11:16:00
prion
prion
Code injection
2021-10-20 11:17:00
Design/Logic Flaw
2021-10-20 11:17:00
Code injection
2021-10-20 11:16:00
cbl_mariner
cbl_mariner
CVE-2021-35607 affecting package mysql 8.0.24-1
2022-04-09 06:53:03
CVE-2021-35626 affecting package mysql 8.0.24-1
2022-04-09 06:53:03
CVE-2021-35591 affecting package mysql 8.0.26-2
2021-11-06 06:45:31
redhatcve
redhatcve
CVE-2021-35597
2021-10-20 18:44:16
CVE-2021-35640
2021-10-20 18:45:16
CVE-2021-35637
2021-10-20 18:45:31

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

5.5 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

69.0%

JSON
Related for OSV:USN-5123-1
openvas7ubuntu2nessus11fedora3photon3freebsd1ibm1osv22almalinux1oraclelinux1redhat2rocky1debiancve15ubuntucve20veracode13cnvd21cve15prion20cbl_mariner27redhatcve13