Oracle MySQL security vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server version 8.0.31 and prior versions. An attacker with elevated privileges who accesses the network via multiple protocols can compromise MySQL Server...

CVE-2023-21876

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21887

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: GIS. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2023-21887

CVE-2023-21887 affects Oracle MySQL Server (GIS component), vulnerable in MySQL 8.0.31 and earlier. A high-privilege attacker with network access via multiple protocols could cause a hang or crash (DoS) of MySQL Server. Some sources indicate the issue is addressed by upgrading MySQL to 8.0.32 (e....

CVE-2023-21882

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21882

CVE-2023-21882 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.31 and earlier. attacker with network access via multiple protocols can compromise data integrity (unauthorized updates) with high privileges and no user interaction. Root cause: Server: Optimizer vulnerability. R...

CVE-2023-21882

Removed by vendor...

CVE-2023-21883

Removed by vendor...

CVE-2023-21881

Summary for CVE-2023-21881 : Oracle MySQL Server, component Server: Optimizer, is affected in versions 8.0.31 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a denial of service, resulting in a hang or frequently repeatable crash...

CVE-2023-21881

Removed by vendor...

CVE-2023-21880

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

CVE-2023-21879

CVE-2023-21879 affects Oracle MySQL Server (component: Server: Optimizer) with affected versions 8.0.31 and earlier. The initial description notes a network-accessible high-privilege attacker could cause a hang or frequent crashes (complete DoS) of MySQL Server. Connected documents corroborate th...

CVE-2023-21879

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21875

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.31 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2023-21878

Removed by vendor...

CVE-2023-21876

Removed by vendor...

CVE-2023-21877

Removed by vendor...

CVE-2023-21873

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21874

Removed by vendor...

CVE-2023-21872

CVE-2023-21872 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected are 8.0.29 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or repeatable crash (DoS) and may allow unauthorize...