SUSE SLES12: kernel-livepatch-4_12_14-150_69-default / etc (SUSE-SU-2021:2060-1)

The remote SUSE Linux SLES12 / SLES15 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2060-1 advisory. This update for the Linux Kernel 4.12.14-15069 fixes several issues. The following security issues were fixed: -...

SUSE: Security Advisory (SUSE-SU-2021:2060-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 1.0: Mysql PHSA-2021-1.0-0362

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0362. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146863...

Photon OS 2.0: Mysql PHSA-2021-2.0-0320

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0320. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146769...

CVE-2021-2060

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

MySQL 5.6.x < 5.6.51 Multiple Vulnerabilities (Jan 2021 CPU)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.51. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the January 2021 Critical Patch Update advisory: - Vulnerability in the MySQL Server product of Oracle MySQL component: Server:...

CVE-2021-2060

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2021-2060 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2060

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2021-2060

CVE-2021-2060 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 5.6.50 and earlier, 5.7.32 and earlier, and 8.0.22 and earlier. The vulnerability can be exploited by a highly privileged attacker with network access via multiple protocols to cause a hang or crash (a...

CVE-2013-2060

The vulnerability CVE-2013-2060 affects OpenShift Origin’s download_from_url function. A remote attacker can trigger arbitrary commands by injecting shell metacharacters in the URL used to download a cart, enabling remote code execution with network access and high impact per the provided CVSS me...

CVE-2015-2060

CVE-2015-2060 affects cabextract prior to 1.6. The vulnerability arises because cabextract does not properly check for leading slashes when extracting files, allowing an attacker to perform absolute directory traversal via a malformed UTF-8 character that is changed to a UTF-8 encoded slash. This...

CVE-2015-2060

cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash...

CVE-2019-2060

CVE-2019-2060 affects the Android 10 libxaac library, with a potential out-of-bounds read due to a missing bounds check that could lead to information disclosure. Exploitation requires user interaction. Affected product/version: Android 10; Android ID A-112709994. CVSS data from NVD indicates a b...

RHEL 7 : dhcp (RHSA-2019:2060)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2060 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

CVE-2018-2060

CVE-2018-2060 is rejected and not used; it does not represent an active vulnerability entry.

CVE-2018-2060

...

CVE-2017-2060

...

CVE-2016-2060

server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly validate upstream interface names, which allows attackers to bypass intended access restrictions via a...

CVE-2016-2060

CVE-2016-2060 is a local privilege escalation in Qualcomm/netd tethering controls caused by inadequate validation of the upstream interface parameter. FireEye’s analysis and Qualcomm advisories describe that untrusted interface values can be passed through addUpstreamV6Interface to netd, which ul...