Azure Linux 3.0 Security Update: mysql (CVE-2024-21194)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21194 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

OESA-2025-1103 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

Server MySQL Privilege Escalation

The vulnerability of the MySQL Server component’s Security: Privileges section is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information...

Oracle MySQL Server Thread Pooling DoS

The vulnerability of the Server:Thread Pooling component of the Oracle MySQL Server database management system is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...

FreeBSD : MariaDB -- DoS vulnerability in InnoDB (7bcfca95-e563-11ef-873e-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7bcfca95-e563-11ef-873e-8447094a420f advisory. MariaDB reports: Easily exploitable vulnerability allows high privileged attacker with network access v...

CVE-2025-24787 Parameter injection in DB connection URIs leading to local file inclusion in WhoDB

WhoDB is an open source database management tool. In affected versions the application is vulnerable to parameter injection in database connection strings, which allows an attacker to read local files on the machine the application is running on. The application uses string concatenation to build...

Server MySQL Privilege Escalation

The vulnerability of the MySQL Server component relates to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions...

MySQL Optimizer Unauthorized Access Data Modification Deletion

The vulnerability of the MySQL Server component involves unlimited distribution of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and to modify, add, or delete data using the MySQL network protocol...

MySQL Optimizer Unauthorized Access Data Modification Deletion

The vulnerability of the MySQL Server component involves unlimited distribution of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and to modify, add, or delete data using the MySQL network protocol...

MariaDB 11.4.0 < 11.4.5

The version of MariaDB installed on the remote host is prior to 11.4.5. It is, therefore, affected by a vulnerability as referenced in the 11.4.5 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4...

MariaDB 10.11.0 < 10.11.11

The version of MariaDB installed on the remote host is prior to 10.11.11. It is, therefore, affected by a vulnerability as referenced in the 10.11.11 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior,...

MariaDB 10.6.0 < 10.6.21

The version of MariaDB installed on the remote host is prior to 10.6.21. It is, therefore, affected by a vulnerability as referenced in the 10.6.21 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior,...

MariaDB 10.5.0 < 10.5.28

The version of MariaDB installed on the remote host is prior to 10.5.28. It is, therefore, affected by a vulnerability as referenced in the 10.5.28 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior,...

mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024)

A flaw was found in the MySQL Server product of Oracle MySQL component: Client: mysqldump. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can resul...

mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024)

A flaw was found in the MySQL Server product of Oracle MySQL component: Client: mysqldump. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can resul...

MariaDB -- DoS vulnerability in InnoDB

MariaDB reports: Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL...

mysql: InnoDB unspecified vulnerability (CPU Oct 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024)

A flaw was found in the MySQL Server product of Oracle MySQL component: Client: mysqldump. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can resul...

CVE-2025-21497

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2025-21567

A flaw was found in the MySQL Server component: Server: Security: Privileges. This vulnerability allows unauthorized read access to a subset of MySQL Server data via multiple protocols...