PT-2022-5172 · Oracle +5 · Mysql Server +4

🗓️ 05 Jul 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

MySQL Server optimizer flaw enables takeover; affects 8.0.27 and earlier; upgrade beyond 8.0.27.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by OpenSSL vulnerability (CVE-2021-3712)	2 Feb 202317:14	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XStream affect IBM Spectrum Copy Data Management	11 Dec 202100:37	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability found in zlib fixed in the zlib version shipped with IBM Security Verify for Gateway (RADIUS & WinLogin) and for Bridge (DirSync)	8 Dec 202216:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Events Operator is affected by a denial of service in OpenSSL (CVE-2023-0215).	21 Sep 202314:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	23 Sep 202222:05	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in OpenSSL may affect IBM Spectrum Protect Backup-Archive Client (CVE-2022-0778)	29 Jun 202219:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities	7 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator was vulnerable to denial of service due to a zlib vulnerability (CVE-2018-25032)	2 Feb 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Safer Payments is vulnerable to OpenSSL Denial of Sevice Attack (CVE-2022-0778)	25 Apr 202307:58	–	ibm

Source	Link
github	www.github.com/drago-96/CVE-2022-0778
github	www.github.com/alcaparra/CVE-2022-1292
github	www.github.com/d0rb/CVE-2023-38545
github	www.github.com/UTsweetyfish/CVE-2023-38545
github	www.github.com/yywing/cve-2022-0778
github	www.github.com/jkakavas/CVE-2022-0778-POC
github	www.github.com/imfht/CVE-2023-38545
github	www.github.com/fatmo666/CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow
github	www.github.com/rama291041610/CVE-2022-1292
github	www.github.com/greek0x0/CVE-2022-1292

10 Dec 2023 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 29 - 10

CVSS 3.19.8

CVSS 36.5

EPSS0.87816

SSVC