Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:7119
HistoryOct 25, 2022 - 7:30 a.m.

(RHSA-2022:7119) Moderate: mysql:8.0 security, bug fix, and enhancement update

2022-10-2507:30:28
access.redhat.com
230

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

69.1%

JSON

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30).

Security Fix(es):

  • mysql: Server: DML multiple unspecified vulnerabilities (CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2021-2481, CVE-2021-35575, CVE-2021-35577, CVE-2021-35610, CVE-2021-35612, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628, CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35638, CVE-2021-35641, CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645, CVE-2021-35646, CVE-2021-35647, CVE-2022-21253, CVE-2022-21254, CVE-2022-21264, CVE-2022-21278, CVE-2022-21297, CVE-2022-21339, CVE-2022-21342, CVE-2022-21351, CVE-2022-21370, CVE-2022-21378, CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21569, CVE-2022-21265)

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2021-35546, CVE-2022-21344, CVE-2022-21415)

  • mysql: Server: Error Handling unspecified vulnerability (CVE-2021-35596)

  • mysql: C API unspecified vulnerability (CVE-2021-35597)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2021-35602, CVE-2021-35630, CVE-2022-21515)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2021-35604, CVE-2022-21302, CVE-2022-21348, CVE-2022-21352, CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21517, CVE-2022-21537, CVE-2022-21539, CVE-2022-21423)

  • mysql: Server: Group Replication Plugin multiple unspecified vulnerabilities (CVE-2021-35608, CVE-2022-21256, CVE-2022-21379, CVE-2022-21454)

  • mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2021-35622, CVE-2022-21358, CVE-2022-21372, CVE-2022-21538)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2021-35624, CVE-2022-21245, CVE-2021-35625)

  • mysql: Server: GIS unspecified vulnerability (CVE-2021-35631)

  • mysql: Server: Data Dictionary unspecified vulnerability (CVE-2021-35632)

  • mysql: Server: PS unspecified vulnerability (CVE-2021-35637)

  • mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CVE-2021-35639, CVE-2022-21303, CVE-2022-21522, CVE-2022-21534)

  • mysql: Server: FTS multiple unspecified vulnerabilities (CVE-2021-35648, CVE-2022-21427)

  • mysql: Server: Federated multiple unspecified vulnerabilities (CVE-2022-21270, CVE-2022-21547)

  • mysql: Server: Parser unspecified vulnerability (CVE-2022-21304)

  • mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2022-21362, CVE-2022-21374)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2022-21367)

  • mysql: Server: Components Services unspecified vulnerability (CVE-2022-21368)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2022-21425, CVE-2022-21444, CVE-2021-35640, CVE-2022-21249)

  • mysql: Server: PAM Auth Plugin unspecified vulnerability (CVE-2022-21457)

  • mysql: Server: Logging multiple unspecified vulnerabilities (CVE-2022-21460, CVE-2021-35633)

  • mysql: Server: Security: Roles unspecified vulnerability (CVE-2021-35623)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Rebuild mecab due to change in the suffix (from .el8 to .el8.0.0) [rhel-8] (BZ#2110940)
OSVersionArchitecturePackageVersionFilename
RedHatanys390xmysql-server-debuginfo< 8.0.30-1.module+el8.6.0+16523+5cb0e868mysql-server-debuginfo-8.0.30-1.module+el8.6.0+16523+5cb0e868.s390x.rpm
RedHatanyppc64lemysql-debugsource< 8.0.30-1.module+el8.6.0+16523+5cb0e868mysql-debugsource-8.0.30-1.module+el8.6.0+16523+5cb0e868.ppc64le.rpm
RedHatanyppc64lemecab-ipadic-eucjp< 2.7.0.20070801-16.module+el8.0.0+3898+e09bb8demecab-ipadic-EUCJP-2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de.ppc64le.rpm
RedHatanyx86_64mecab< 0.996-2.module+el8.6.0+16523+5cb0e868mecab-0.996-2.module+el8.6.0+16523+5cb0e868.x86_64.rpm
RedHatanyx86_64mysql-libs-debuginfo< 8.0.30-1.module+el8.6.0+16523+5cb0e868mysql-libs-debuginfo-8.0.30-1.module+el8.6.0+16523+5cb0e868.x86_64.rpm
RedHatanyppc64lemecab-debugsource< 0.996-2.module+el8.6.0+16523+5cb0e868mecab-debugsource-0.996-2.module+el8.6.0+16523+5cb0e868.ppc64le.rpm
RedHatanyaarch64mysql-test< 8.0.30-1.module+el8.6.0+16523+5cb0e868mysql-test-8.0.30-1.module+el8.6.0+16523+5cb0e868.aarch64.rpm
RedHatanyaarch64mecab-debugsource< 0.996-2.module+el8.6.0+16523+5cb0e868mecab-debugsource-0.996-2.module+el8.6.0+16523+5cb0e868.aarch64.rpm
RedHatanys390xmysql-server< 8.0.30-1.module+el8.6.0+16523+5cb0e868mysql-server-8.0.30-1.module+el8.6.0+16523+5cb0e868.s390x.rpm
RedHatanyx86_64mysql-debuginfo< 8.0.30-1.module+el8.6.0+16523+5cb0e868mysql-debuginfo-8.0.30-1.module+el8.6.0+16523+5cb0e868.x86_64.rpm
Rows per page:
1-10 of 721

Related

nessus 27
osv 25
rocky 2
almalinux 2
redhat 2
oraclelinux 2
ubuntu 7
cloudfoundry 3
freebsd 5
altlinux 1
fedora 7
photon 13
ibm 3
f5 6
debiancve 8
ubuntucve 17
veracode 8
cbl_mariner 18
redhatcve 10
cve 8
cnvd 14
prion 11
nessus
nessus
RHEL 8 : mysql:8.0 (RHSA-2022:7119)
2022-10-26 00:00:00
RHEL 7 : rh-mysql80-mysql (RHSA-2022:6518)
2022-09-14 00:00:00
Rocky Linux 8 : mysql:8.0 (RLSA-2022:7119)
2023-11-07 00:00:00
osv
osv
Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 07:30:28
Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 00:00:00
Moderate: mysql security, bug fix, and enhancement update
2022-09-20 00:00:00
rocky
rocky
mysql:8.0 security, bug fix, and enhancement update
2022-10-25 07:30:28
mysql security, bug fix, and enhancement update
2022-09-20 11:37:11
almalinux
almalinux
Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 00:00:00
Moderate: mysql security, bug fix, and enhancement update
2022-09-20 00:00:00
redhat
redhat
(RHSA-2022:6518) Moderate: rh-mysql80-mysql security, bug fix, and enhancement update
2022-09-14 12:59:54
(RHSA-2022:6590) Moderate: mysql security, bug fix, and enhancement update
2022-09-20 11:37:11
oraclelinux
oraclelinux
mysql:8.0 security, bug fix, and enhancement update
2022-10-27 00:00:00
mysql security, bug fix, and enhancement update
2022-09-22 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2021-10-25 00:00:00
MySQL vulnerabilities
2022-05-03 00:00:00
MySQL vulnerabilities
2022-02-03 00:00:00
cloudfoundry
cloudfoundry
USN-5400-1: MySQL vulnerabilities | Cloud Foundry
2022-05-26 00:00:00
USN-5270-1: MySQL vulnerabilities | Cloud Foundry
2022-03-10 00:00:00
USN-5537-1: MySQL vulnerabilities | Cloud Foundry
2022-08-26 00:00:00
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2022-01-18 00:00:00
MySQL -- Multiple vulnerabilities
2021-10-16 00:00:00
MySQL -- Multiple vulnerabilities
2022-04-16 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package MySQL version 8.0.29-alt1
2022-07-05 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: community-mysql-8.0.27-1.fc34
2021-11-10 08:16:41
[SECURITY] Fedora 33 Update: community-mysql-8.0.27-1.fc33
2021-11-10 02:33:23
[SECURITY] Fedora 36 Update: community-mysql-8.0.30-2.fc36
2022-08-22 01:11:28
photon
photon
Important Photon OS Security Update - PHSA-2021-3.0-0327
2021-11-10 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0119
2021-10-27 00:00:00
Important Photon OS Security Update - PHSA-2021-0119
2021-10-27 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities in Oracle® MySQL
2023-01-25 21:00:47
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2022-11-08 16:20:11
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2022-05-12 14:14:41
f5
f5
K51585448 : Multiple MySQL vulnerabilities CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531
2022-09-06 00:00:00
K63314101 : Multiple MySQL vulnerabilities
2022-05-11 00:00:00
K15094237 : MySQL vulnerabilities CVE-2022-21460, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21482
2022-05-11 00:00:00
debiancve
debiancve
CVE-2023-21950
2023-07-18 21:15:11
CVE-2021-35640
2021-10-20 11:17:00
CVE-2022-21278
2022-01-19 12:15:00
ubuntucve
ubuntucve
CVE-2023-21950
2023-07-18 00:00:00
CVE-2021-35626
2021-10-20 00:00:00
CVE-2021-35627
2021-10-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-10 00:24:26
Denial Of Service (DoS)
2022-11-10 00:24:37
Information Disclosure
2022-11-10 00:25:31
cbl_mariner
cbl_mariner
CVE-2021-35626 affecting package mysql 8.0.24-1
2022-04-09 06:53:03
CVE-2021-35596 affecting package mysql 8.0.24-1
2022-04-09 06:53:03
CVE-2021-35640 affecting package mysql 8.0.24-1
2022-04-09 06:53:03
redhatcve
redhatcve
CVE-2021-35640
2021-10-20 18:45:16
CVE-2021-35646
2021-10-20 19:25:35
CVE-2021-35597
2021-10-20 18:44:16
cve
cve
CVE-2022-21301
2022-01-19 12:15:00
CVE-2021-35602
2021-10-20 11:17:00
CVE-2021-35627
2021-10-20 11:17:00
cnvd
cnvd
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-80260)
2021-10-20 00:00:00
Oracle MySQL Server has an unspecified vulnerability (CNVD-2021-81786)
2021-10-20 00:00:00
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-80251)
2021-10-20 00:00:00
prion
prion
Code injection
2021-10-20 11:16:00
Design/Logic Flaw
2021-10-20 11:17:00
Code injection
2021-10-20 11:17:00

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

69.1%

JSON
Related for RHSA-2022:7119
nessus27osv25rocky2almalinux2redhat2oraclelinux2ubuntu7cloudfoundry3freebsd5altlinux1fedora7photon13ibm3f56debiancve8ubuntucve17veracode8cbl_mariner18redhatcve10cve8cnvd14prion11