SUSE SLES15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-client / etc (SUSE-SU-2023:4907-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4907-1 advisory. - CVE-2023-22084: Fixed an easily exploitable vulnerability that allowed high privileged attacker with network access via multiple protocols...

K000137940: Multiple Oracle MySQL vulnerabilities

Security Advisory Description CVE-2023-22015 Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access...

Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities in Oracle MySQL Server

Summary IBM Security Guardium has released an update to address these vulnerabilities. Vulnerability Details CVEID:CVE-2023-21940 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Server: Components Services component could allow a remote authenticated attacker to...

PT-2023-9635 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.37 and prior Description: The issue is related to the Server: Pluggable Auth component of Oracle MySQL Server. It allows a high privileged attacker with network access via multiple protocols to compromise the...

PT-2023-9629 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.37 and prior Oracle MySQL Server versions 8.4.0 and prior Description: The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. It allows a low-privilege...

PT-2023-9627 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.4.0 and prior Description: The issue is related to insufficient input validation in the Server: Thread Pooling component of Oracle MySQL Server. It allows an attacker with network access via multiple protocols t...

FreeBSD : MariaDB -- Denial-of-Service vulnerability (388e6557-8c80-11ee-9ee3-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 388e6557-8c80-11ee-9ee3-84a93843eb75 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that...

Fedora 38 : galera / mariadb (2023-7fe02ec473)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-7fe02ec473 advisory. MariaDB 10.5.23 & Galera 26.4.16 Release notes: https://mariadb.com/kb/en/mariadb-10-5-23-release-notes/ Tenable has extracted the preceding description bloc...

Fedora 37 : galera / mariadb (2023-bff42b29eb)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-bff42b29eb advisory. MariaDB 10.5.23 & Galera 26.4.16 Release notes: https://mariadb.com/kb/en/mariadb-10-5-23-release-notes/ Tenable has extracted the preceding description bloc...

The vulnerability of the MySQL Server component of the Oracle MySQL database management system, related to improper privilege assignment, allows attackers to execute DoS attacks.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to carry out a DoS Denial-of-Service attack remotely...

OESA-2023-1835 mysql security update

The MySQLTM software delivers a very fast, multi-threaded, multi-user, and robust SQL Structured Query Language database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or...

MariaDB 10.6.0 < 10.6.16

The version of MariaDB installed on the remote host is prior to 10.6.16. It is, therefore, affected by a vulnerability as referenced in the 10.6.16 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

MariaDB 11.1.0 < 11.1.3

The version of MariaDB installed on the remote host is prior to 11.1.3. It is, therefore, affected by a vulnerability as referenced in the 11.1.3 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

MariaDB 10.5.0 < 10.5.23

The version of MariaDB installed on the remote host is prior to 10.5.23. It is, therefore, affected by a vulnerability as referenced in the 10.5.23 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

MariaDB 10.11.0 < 10.11.6

The version of MariaDB installed on the remote host is prior to 10.11.6. It is, therefore, affected by a vulnerability as referenced in the 10.11.6 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

MariaDB 11.0.0 < 11.0.4

The version of MariaDB installed on the remote host is prior to 11.0.4. It is, therefore, affected by a vulnerability as referenced in the 11.0.4 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

Fedora 39 : community-mysql (2023-9ccff0b1b7)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9ccff0b1b7 advisory. MySQL 8.0.34 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-34.html Tenable has extracted the preceding description block...

Rocky Linux 9 : mysql (RLSA-2022:6590)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6590 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior...

Rocky Linux 8 : mariadb-connector-c (RLSA-2020:5503)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:5503 advisory. - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE:...

Rocky Linux 8 : mysql:8.0 (RLSA-2019:2511)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:2511 advisory. mysql: Server: Replication multiple unspecified vulnerabilities CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617...