Unspecified Vulnerability in Oracle MySQL Cluster (CNVD-2020-29572)

Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in the Cluster: General component of MySQL Cluster in Oracle MySQL. An attacker can exploit this vulnerability to cause a denial of service hangs or frequent crashes and unauthorized...

CVE-2020-2768

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.3.28 and prior, 7.4.27 and prior, 7.5.17 and prior, 7.6.13 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with networ...

Code injection

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.3.28 and prior, 7.4.27 and prior, 7.5.17 and prior, 7.6.13 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with networ...

CVE-2020-2768

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.3.28 and prior, 7.4.27 and prior, 7.5.17 and prior, 7.6.13 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with networ...

Vulnerabilities fixed in Oracle MySQL products

Oracle has fixed vulnerabilities in its MySQL products: - MySQL Server - MySQL Workbench - MySQL Enterprise Monitor - MySQL Cluster - MySQL Client - MySQL Connectors One of these vulnerabilities CVE-2019-5482 concerns an erng serious vulnerability in MySQL Server. This vulnerability allows an...

CVE-2020-2768: Undefined Security Weakness

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.3.28 and prior, 7.4.27 and prior, 7.5.17 and prior, 7.6.13 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with networ...

PT-2020-2404

Name of the Vulnerable Software and Affected Versions Oracle MySQL Cluster versions 7.3.28 and prior Oracle MySQL Cluster versions 7.4.27 and prior Oracle MySQL Cluster versions 7.5.17 and prior Oracle MySQL Cluster versions 7.6.13 and prior Oracle MySQL Cluster versions 8.0.19 and prior...

PT-2020-3237

Name of the Vulnerable Software and Affected Versions dojo versions prior to 1.12.8 dojo versions prior to 1.13.7 dojo versions prior to 1.14.6 dojo versions prior to 1.15.3 dojo versions prior to 1.16.2 Description The issue exists due to the lack of measures to neutralize special elements in th...

MySQL Cluster 7.2.x < 7.2.33 / 7.3.x < 7.3.21 / 7.4.x < 7.4.19 / 7.5.x < 7.5.10 Denial of Service Vulnerability

The version of MySQL Cluster running on the remote host is 7.2.x prior to 7.2.33, 7.3.x prior to 7.3.21, 7.4.x prior to 7.4.19 or 7.5.x prior to 7.5.10. It is, therefore, affected by a denial of service vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster:...

CVE-2018-2877

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: ndbcluster/plugin. Supported versions that are affected are 7.2.27 and prior, 7.3.16 and prior, 7.4.14 and prior and 7.5.5 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to t...

Code injection

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: ndbcluster/plugin. Supported versions that are affected are 7.2.27 and prior, 7.3.16 and prior, 7.4.14 and prior and 7.5.5 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to t...

CVE-2018-2877

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: ndbcluster/plugin. Supported versions that are affected are 7.2.27 and prior, 7.3.16 and prior, 7.4.14 and prior and 7.5.5 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to t...

CVE-2018-2877

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: ndbcluster/plugin. Supported versions that are affected are 7.2.27 and prior, 7.3.16 and prior, 7.4.14 and prior and 7.5.5 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to t...

CVE-2018-2877: Undefined Security Weakness

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: ndbcluster/plugin. Supported versions that are affected are 7.2.27 and prior, 7.3.16 and prior, 7.4.14 and prior and 7.5.5 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to t...

PT-2018-15889

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 7.2.27 and prior Oracle MySQL versions 7.3.16 and prior Oracle MySQL versions 7.4.14 and prior Oracle MySQL versions 7.5.5 and prior Description A vulnerability in the MySQL Cluster component allows a low-privileged...

Unspecified Vulnerability in Oracle MySQL Cluster (CNVD-2018-09087)

Oracle MySQL Server is a lightweight relational database system. An unspecified vulnerability exists in the Cluster: ndbcluster/plugin component of Oracle MySQL Cluster. An attacker could exploit this vulnerability to affect availability...

CVE-2017-15945

The CVE-2017-15945 issue affects Gentoo package installation scripts for dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera prior to 2017-09-29. The root cause is misused chown calls on user-writable directory trees, enabling a local user with acc...

CVE-2017-15945: Incorrect Permission Assignment for Critical Resource

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql...

PT-2017-14302

Name of the Vulnerable Software and Affected Versions Gentoo dev-db/mysql versions prior to 2017-09-29 Gentoo dev-db/mariadb versions prior to 2017-09-29 Gentoo dev-db/percona-server versions prior to 2017-09-29 Gentoo dev-db/mysql-cluster versions prior to 2017-09-29 Gentoo dev-db/mariadb-galera...

MySQL Cluster 7.3.x < 7.3.6 CLSTCONF RCE (July 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.6. It is, therefore, affected by an overflow condition in the CLSTCONF component, specifically in the Python sockrecvfrominto function within file Modules/socketmodule.c, due to improper validation of user-supplied inpu...