PT-2023-9570

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.39 and prior Oracle MySQL Server versions 8.4.2 and prior Oracle MySQL Server versions 9.0.1 and prior Description The issue is related to incorrect resource cleanup or deallocation in the Server: Optimizer...

PT-2023-9561

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.39 and prior Oracle MySQL Server versions 8.4.1 and prior Oracle MySQL Server versions 9.0.1 and prior Description The issue is related to the Server: Thread Pooling component of Oracle MySQL Server and is...

FreeBSD : MariaDB -- Denial-of-Service vulnerability (388e6557-8c80-11ee-9ee3-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 388e6557-8c80-11ee-9ee3-84a93843eb75 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that...

Fedora 38 : galera / mariadb (2023-7fe02ec473)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-7fe02ec473 advisory. MariaDB 10.5.23 & Galera 26.4.16 Release notes: https://mariadb.com/kb/en/mariadb-10-5-23-release-notes/ Tenable has extracted the preceding description bloc...

Fedora 37 : galera / mariadb (2023-bff42b29eb)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-bff42b29eb advisory. MariaDB 10.5.23 & Galera 26.4.16 Release notes: https://mariadb.com/kb/en/mariadb-10-5-23-release-notes/ Tenable has extracted the preceding description bloc...

MySQL Server Privilege DoS

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to carry out a DoS Denial-of-Service attack remotely...

OESA-2023-1835 mysql security update

The MySQLTM software delivers a very fast, multi-threaded, multi-user, and robust SQL Structured Query Language database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or...

MariaDB 11.0.0 < 11.0.4

The version of MariaDB installed on the remote host is prior to 11.0.4. It is, therefore, affected by a vulnerability as referenced in the 11.0.4 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

MariaDB 10.6.0 < 10.6.16

The version of MariaDB installed on the remote host is prior to 10.6.16. It is, therefore, affected by a vulnerability as referenced in the 10.6.16 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

MariaDB 10.5.0 < 10.5.23

The version of MariaDB installed on the remote host is prior to 10.5.23. It is, therefore, affected by a vulnerability as referenced in the 10.5.23 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

MariaDB 10.11.0 < 10.11.6

The version of MariaDB installed on the remote host is prior to 10.11.6. It is, therefore, affected by a vulnerability as referenced in the 10.11.6 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

MariaDB 11.1.0 < 11.1.3

The version of MariaDB installed on the remote host is prior to 11.1.3. It is, therefore, affected by a vulnerability as referenced in the 11.1.3 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

Rocky Linux 8 : mariadb:10.3 (RLSA-2022:1556)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1556 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.7.33 and prior. Easily...

Rocky Linux 8 : mariadb-connector-c (RLSA-2020:5503)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:5503 advisory. - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE:...

Rocky Linux 8 : mysql:8.0 (RLSA-2019:2511)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:2511 advisory. mysql: Server: Replication multiple unspecified vulnerabilities CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617...

Fedora 39 : community-mysql (2023-9ccff0b1b7)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9ccff0b1b7 advisory. MySQL 8.0.34 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-34.html Tenable has extracted the preceding description block...

Rocky Linux 9 : mysql (RLSA-2022:6590)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6590 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior...

Rocky Linux 8 : mysql:8.0 (RLSA-2022:7119)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7119 advisory. mysql: Server: DML multiple unspecified vulnerabilities CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413...

BIT-2020-14550

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

BIT-2020-14789

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...