PT-2023-2496 · Mysql Server +7 · Mysql Server +7

🗓️ 18 Apr 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 3 Views

MySQL Server optimizer flaw lets a attacker cause denial of service in 8.0.32 and earlier.

Reporter	Title	Published	Views	Family All 7144
vulnersOsv	openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2023-0215 via openssl-src (=110.0.7+1.1.0i)	7 Feb 202312:00	–	vulnersosv
vulnersOsv	roaring-landmask (=0.4.0) potentially affected by CVE-2022-2097 via openssl-src (=300.0.0+3.0.0)	5 Jul 202212:00	–	vulnersosv
vulnersOsv	activedirectoryenum (>=0.4.7 <=0.5.0), airflow-run (=0.4.9) +215 more potentially affected by CVE-2020-36242 via cryptography (>=3.1.0 <=3.3.1)	10 Feb 202101:32	–	vulnersosv
vulnersOsv	ax-env (>=0.2.2 <=0.3.1), fb-sapp (>=0.5.3 <=0.5.4) +4 more potentially affected by CVE-2022-4899 via zstd (>=1.4.4.0 <=1.5.2.6)	31 Mar 202321:30	–	vulnersosv
vulnersOsv	roaring-landmask (=0.4.0) potentially affected by CVE-2023-0215 via openssl-src (=300.0.0+3.0.0)	8 Feb 202322:28	–	vulnersosv
vulnersOsv	openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2023-0215 via openssl-src (=110.0.7+1.1.0i)	8 Feb 202322:28	–	vulnersosv
vulnersOsv	activedirectoryenum (>=0.4.7 <=0.5.0), airflow-run (=0.4.9) +215 more potentially affected by CVE-2020-36242 via cryptography (>=3.1.0 <=3.3.1)	7 Feb 202120:15	–	vulnersosv
vulnersOsv	openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2022-2097 via openssl-src (=110.0.7+1.1.0i)	5 Jul 202212:00	–	vulnersosv
vulnersOsv	roaring-landmask (=0.4.0) potentially affected by CVE-2023-0215 via openssl-src (=300.0.0+3.0.0)	7 Feb 202312:00	–	vulnersosv
vulnersOsv	openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2022-2097 via openssl-src (=110.0.7+1.1.0i)	6 Jul 202219:57	–	vulnersosv

Source	Link
github	www.github.com/d0rb/CVE-2023-38545
github	www.github.com/UTsweetyfish/CVE-2023-38545
github	www.github.com/fatmo666/CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow
github	www.github.com/imfht/CVE-2023-38545
github	www.github.com/vanigori/CVE-2023-38545-sample
github	www.github.com/bcdannyboy/CVE-2023-38545
github	www.github.com/xen0bit/CVE-2022-37434_poc
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

20 Jan 2025 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 26.1 - 6.4

CVSS 3.19.8

EPSS0.78483

SSVC

MySQL Server optimizer flaw denial of service network attacker version 8.0.32 earlier versions update recommendation