PT-2023-1204

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.31 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...

PT-2023-1194

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.31 and prior Description The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: GIS component. This allows a high-privileged attacker with network access via...

PT-2023-1222

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.31 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...

PT-2023-1214

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.30 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...

PT-2023-1207

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.30 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...

PT-2023-1210

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.31 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...

CVE-2023-21880: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

mysql-server:fuzz_initfile: Null-dereference READ in JOIN::optimize

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=4611759178907648 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

PT-2022-6260

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified MySQL Server versions 5.7.41 and earlier, 8.0.32 and earlier Description The public API function BIO new NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally...

Ubuntu 20.04 LTS / 22.04 LTS : MariaDB vulnerabilities (USN-5739-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5739-1 advisory. Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has be...

Information Disclosure

rh-mysql80-mysql is vulnerable to information disclosure. The vulnerability exists in the Server: Security: Encryption component, allowing an attacker to get read access to a subset of MySQL Server accessible data through the multiple protocols...

Information Disclosure

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing attackers to cause an application crash and modify the critical data or all MySQL Server accessible data through multiple protocols...

Information Disclosure

rh-mysql80-mysql is vulnerable to information disclosure. The vulnerability exists in the Server: PAM Auth Plugin component, allowing attackers to modify the critical data or all MySQL Server accessible data through the multiple protocols...

MariaDB 10.1.0 < 10.1.29 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.29. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.29 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are...

MariaDB 10.0.0 < 10.0.7 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.7 advisory. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and...

MariaDB 10.0.0 < 10.0.5 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.5 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users t...

MariaDB 10.1.0 < 10.1.22 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.22. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.22 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: MyISAM. Supported versions that are affected a...

MariaDB 5.5.0 < 5.5.58 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.58 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affecte...

MariaDB 10.2.0 < 10.2.18 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.18 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Connection Handling. Supported versions that a...

MariaDB 5.5.0 < 5.5.27 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.27. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.27 advisory. - Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through...