455 matches found
PT-2018-3597 · Mysql Server +8 · Mysql Client +8
Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.7.32 and prior MySQL Client versions 8.0.22 and prior Description: The issue is related to the C API component of the MySQL Client product, which allows an unauthenticated attacker with network access via multiple...
PT-2018-16029 · Oracle +6 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.60 and prior Oracle MySQL versions 5.6.40 and prior Oracle MySQL versions 5.7.22 and prior Oracle MySQL versions 8.0.11 and prior Description: The issue allows a high privileged attacker with network access via...
PT-2018-3549 · Mysql Server +8 · Mysql Client +8
Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.48 and prior MySQL Client versions 5.7.30 and prior MySQL Client versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the C API component of the MySQL Client product. It...
mysql: Client programs unspecified vulnerability (CPU Jul 2017)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server execut...
mysql: Client programs unspecified vulnerability (CPU Oct 2017)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...
Oracle MySQL Client programs Subcomponent Unauthorized Access Vulnerability
Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Client programs subcomponent of the MyS...
mysql: prepared statement handle use-after-free after disconnect
A flaw was found in the way MySQL client library libmysqlclient handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient...
mysql: prepared statement handle use-after-free after disconnect
A flaw was found in the way MySQL client library libmysqlclient handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient...
[SECURITY] Fedora 25 Update: python-PyMySQL-0.7.10-10.fc25
This package contains a pure-Python MySQL client library. The goal of PyMyS QL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPyth on and Jython...
mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previo...
mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previo...
The vulnerability of the MySQL database management system allows unauthorized users, after passing authentication, to affect the accessibility of data.
The vulnerability in the Oracle database management system, related to the MySQL Client component, allows malicious actors operating remotely to compromise the confidentiality, integrity, and accessibility of data...
Oracle MySQL Client Component Elevation of Privilege Vulnerability
Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the MySQL Client component that allows a local attacker to exploit the...
DLA-359-1 mysql-5.5 - packages as an option announcement
Bulletin has no description...
PT-2020-2609 · Mysql Server +9 · Mysql Client +9
Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.47 and prior MySQL Client versions 5.7.27 and prior MySQL Client versions 8.0.17 and prior Description: The issue is related to the C API component of the MySQL Client product, which has inadequate access control. Th...
PT-2019-5368 · Mysql Server +8 · Mysql Client +8
Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.47 and prior MySQL Client versions 5.7.29 and prior MySQL Client versions 8.0.18 and prior Description: The issue is related to a lack of protection for service data in the MySQL Client C API component. It allows a...
PT-2019-5709 · Mysql Server +6 · Mysql Client +6
Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.47 and prior MySQL Client versions 5.7.29 and prior MySQL Client versions 8.0.19 and prior Description: The issue is related to insufficient access control in the C API component of the MySQL Client. It allows a remo...
PT-2020-1448 · Mysql Server +8 · Mysql Client +8
Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.46 and prior MySQL Client versions 5.7.28 and prior MySQL Client versions 8.0.18 and prior Description: The issue is related to errors in resource release in the C API component of the MySQL Client product. It allows...
mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)
It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the "--ssl" option. A man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client an...
mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)
It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the "--ssl" option. A man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client an...