Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : MariaDB vulnerabilities (USN-6600-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6600-1 advisory. Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaD...

Medium: mariadb

Issue Overview: Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

Ubuntu 16.04 ESM / 18.04 ESM : MySQL vulnerabilities (USN-6583-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6583-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been...

MariaDB 11.2.0 < 11.2.3

The version of MariaDB installed on the remote host is prior to 11.2.3. It is, therefore, affected by a vulnerability as referenced in the mdb-11-2-3-rn advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and...

SUSE SLES15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-client / etc (SUSE-SU-2023:4907-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4907-1 advisory. - CVE-2023-22084: Fixed an easily exploitable vulnerability that allowed high privileged attacker with network access via multiple protocols...

PT-2023-9625

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.38, 8.4.1, and 9.0.0 Description The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, is related to insufficient input validation. This issue can be exploited by a remot...

PT-2023-9564

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of MySQL Server, which can be exploited by an attacker with high...

PT-2023-9676

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to insufficient input validation in the InnoDB component of the MySQL Server. It can be exploit...

PT-2023-9539

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

PT-2023-9559

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of MySQL Server and can be easily exploited. It allows an attacker with...

PT-2023-9560

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of MySQL Server and can be easily exploited. It allows an attacker with...

PT-2023-9568

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of Oracle MySQL Server and is caused by incorrect clearance or release ...

PT-2023-9628

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.37 and prior MySQL Server versions 8.4.0 and prior Description The issue is related to insufficient input validation in the InnoDB component of Oracle MySQL Server. It allows a high-privileged attacker with network...

PT-2023-9311 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

PT-2023-9317 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.4.0 and prior Description: The issue is related to the InnoDB component of the MySQL Server product. It allows a high privileged attacker with network access via multiple protocol...

PT-2023-9624 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to a vulnerability in the InnoDB component of the MySQL Server product, which is caused by weaknesses in the authorization procedur...

PT-2023-9626 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.37 and prior MySQL Server versions 8.4.0 and prior Description: The issue is related to insufficient input validation in the InnoDB component of Oracle MySQL Server. This can be exploited by a remote attacker to caus...

PT-2023-9838 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

K000137734: MariaDB/MySQL vulnerability CVE-2023-22084

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

MGASA-2023-0327 Updated mariadb packages fix a security vulnerability

Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL Server. Additonally a whole bunch of fixes to InnoDB, Replication, Optimizer, Galera, Spider, Backup,... have been applied. See the official release not...