Vulnerabilities fixed in Oracle MySQL

Oracle has fixed vulnerabilities in the following MySQL products: MySQL Workbench MySQL Server MySQL Cluster MySQL Enterprise Monitor MySQL Connectors The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage: Denial-of-Service D...

PT-2021-21019

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.33 and prior Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attack...

PT-2021-20998

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.33 and prior Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attack...

PT-2021-20994

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.33 and prior Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attack...

CVE-2021-35613: Undefined Security Weakness

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful...

CVE-2021-35584: Undefined Security Weakness

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: ndbcluster/plugin DDL. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Cluster...

CVE-2021-35590: Out-of-bounds Write

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

PT-2021-20996

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attacker with access to the physical communication...

PT-2021-20997

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.33 and prior Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attack...

CVE-2021-35598: Improper Validation of Array Index

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

CVE-2021-35592: Improper Validation of Array Index

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication...

Oracle MySQL Cluster input validation error vulnerability

MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database designed to guarantee 99.999% availability. An input validation error vulnerability exists in Oracle MySQL Cluster that stems from improper validation of user-supplied data and can be exploited by an attacker to...

Oracle MySQL Cluster input validation error vulnerability

MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database designed to guarantee 99.999% availability. An input validation error vulnerability exists in Oracle MySQL Cluster, which stems from a lack of proper validation of user-supplied data, and can be exploited by an...

Oracle MySQL Cluster buffer error vulnerability

MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database designed to guarantee 99.999% availability. A buffer overflow vulnerability exists in Oracle MySQL Cluster, which stems from a failure to validate the correct length of user-supplied data before copying it to a...

Oracle MySQL Cluster input validation error vulnerability

MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database designed to guarantee 99.999% availability. An input validation error vulnerability exists in Oracle MySQL Cluster, which can be exploited by an attacker to execute code in the context of a service account...

Oracle MySQL Cluster input validation error vulnerability

MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database designed to guarantee 99.999% availability. A security vulnerability exists in the Cluster: General component of MySQL Cluster 7.4.33, 7.5.23, 7.6.19, 8.0.26 and earlier versions. An attacker could exploit this...

Oracle MySQL input validation vulnerability

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database developed by Oracle Corporation USA.Oracle MySQL Cluster 8.0.26 and prior versions of Cluster: ndbcluster/plugin DDL component is vulnerable to an input validation error. which can be exploited by attackers...

Oracle MySQL Cluster input validation error vulnerability

MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database. A security vulnerability exists in the Cluster: General component of MySQL Cluster 7.4.33, 7.5.23, 7.6.19, 8.0.26 and earlier versions. An attacker could exploit this vulnerability to allow a highly privileged...

Oracle MySQL input validation vulnerability

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database developed by Oracle Corporation USA. Oracle MySQL Cluster 8.0.26 and earlier versions of the Cluster: General component are vulnerable to an input validation error that could be exploited by an attacker to...

PT-2021-6439 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to an out-of-bounds read in the memory of the...