CVE-2020-2901

CVE-2020-2901 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.19 and earlier. Underlying issue allows a high-privilege attacker with network access to cause the server to hang or crash (complete DoS) via multiple protocols. Public exploitation details are not provided in the ...

CVE-2021-35604

CVE-2021-35604 affects Oracle MySQL Server (InnoDB). Affected versions: MySQL 5.7.35 and earlier, and 8.0.26 and earlier. The vulnerability enables a high-privilege attacker with network access (via multiple protocols) to cause a hang or a repeatable crash (DoS) and may allow unauthorized updates...

CVE-2019-2998

CVE-2019-2998 affects Oracle MySQL Server, component Server: Optimizer. Affected versions are 8.0.17 and prior. An attacker with network access via multiple protocols and high privileges can cause a hang or complete DoS of MySQL Server. The connected advisories (e.g., MiracleLinux/RHSA-RHSA-2020-...

CVE-2020-14614

CVE-2020-14614 affects the MySQL Server (Oracle MySQL) package, specifically the Server: Optimizer. Affected versions are 8.0.20 and earlier. An attacker with high privileges and network access via multiple protocols can exploit this to cause a hang or a complete denial-of-service crash of MySQL ...

CVE-2020-14866

CVE-2020-14866 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.21 and earlier. An authenticated, network-accessible attacker could trigger a denial of service by causing the optimizer to hang or crash, per connected documents describing the vulnerability’s im...

CVE-2020-2892

CVE-2020-2892 affects Oracle MySQL Server, component Server: Optimizer, with affected versions 8.0.19 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause the MySQL server to hang or crash (DoS). Related connected documents confirm t...

CVE-2022-21417

CVE-2022-21417 affects Oracle MySQL Server (InnoDB) with vulnerable versions 5.7.37 and earlier and 8.0.28 and earlier. The issue can cause the MySQL Server to hang or crash (partial DoS) via network access. Connected sources indicate fixes in MySQL 8.0.29 and later (e.g., via ALMA/Ubuntu advisor...

CVE-2018-3155

CVE-2018-3155 affects Oracle MySQL MySQL Server (Parser) component. Affects MySQL versions 5.7.23 and earlier and 8.0.12 and earlier. Attack requires network access from low-privilege user and can cause a hang or frequently repeatable crash (DoS) of MySQL Server; CVSSv3 base score 7.7 (HIGH), vec...

CVE-2022-21443

CVE-2022-21443 is an Oracle Java SE/GraalVM EE vulnerability affecting the Libraries component. Affected: Oracle Java SE 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM EE 20.3.5, 21.3.1, 22.0.0.2. Exploitation is network-based and can lead to a partial denial of service, with unauthenticated a...

CVE-2023-22111

CVE-2023-22111 affects Oracle MySQL Server, component Server: UDF . Affects supported versions 8.0.33 and prior. The vulnerability is exploitable by a high-privilege attacker with network access (via multiple protocols) and can result in a hang or crash (DoS) of MySQL Server. Root cause is descri...

CVE-2019-3003

CVE-2019-3003 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.16 and earlier. The vulnerability is exploitable remotely over multiple protocols by a high-privilege attacker, potentially causing a hang or crash (DoS) of MySQL Server. CVSS 3.0 Base Score is 4.9 (Availability impact)...

CVE-2020-14836

CVE-2020-14836 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.21 and earlier. Vulnerability allows a low-privileged, network-access attacker (via multiple protocols) to cause the server to hang or crash (complete DoS) as described in the CVE entry. Some connected advisories ...

CVE-2021-35559

CVE-2021-35559 is a vulnerability in Oracle Java SE/OpenJDK (Swing component) affecting Java SE versions 7u311, 8u301, 11.0.12, and 17, plus Oracle GraalVM Enterprise Edition 20.3.3 and 21.2.0. The issue is described as easily exploitable with network access and can lead to partial denial of serv...

CVE-2022-21341

CVE-2022-21341 is an openly documented vulnerability affecting Oracle Java SE and Oracle GraalVM Enterprise Edition across multiple components (Serialization, JAXP, ImageIO, Hotspot, Libraries, 2D, etc.). Affected versions include Java SE 7u321, 8u311, 11.0.13, 17.0.1 and GraalVM EE 20.3.4/21.3.0...

CVE-2024-21015

CVE-2024-21015 affects Oracle MySQL Server (component: Server: DML). Influence: vulnerable on MySQL Server versions 8.0.34 and prior and 8.3.0 and prior; exploit can cause hang or crash (DoS) and unauthorized update/insert/delete to some data. Affected by network-accessible vectors; base score 5....

CVE-2020-14597

CVE-2020-14597 affects Oracle MySQL Server, component Server: Optimizer, in 8.0.20 and earlier. A high-privilege attacker with network access via multiple protocols can exploit this to cause a hang or frequent crash (DoS) of MySQL Server. https://nvd.nist.gov shows CVSS 3.1 base score 4.9 (AV:N/A...

CVE-2020-2580

CVE-2020-2580 – MySQL Server (Oracle MySQL) – DDL vulnerability . The vulnerability affects MySQL Server component: Server: DDL in 8.0.17 and earlier. A high-privilege attacker who can reach the server over the network via multiple protocols can exploit this to cause a hang or a near-frequent cra...

CVE-2020-2659

CVE-2020-2659 affects Oracle Java SE/SE Embedded (Networking) with vulnerable openjdk7/8 builds (7u241, 8u231; Embedded 8u231). The issue is a networking component flaw in DatagramChannelImpl that could let an unauthenticated attacker cause a partial denial of service over the network. Several co...

CVE-2024-20963

CVE-2024-20963 affects Oracle MySQL Server (component: Server: Security: Encryption). Affected are MySQL 8.0.35 and prior and 8.2.0 and prior. An attacker with network access and low privileges can exploit via multiple protocols to cause a hang or frequent crash (DoS). CVSS v3.1 base 6.5 (Avail. ...

CVE-2018-2562

CVE-2018-2562 affects the MySQL Server component (Partition subcomponent) of Oracle MySQL. Affected versions include 5.5.58 and earlier, 5.6.38 and earlier, and 5.7.19 and earlier. The vulnerability allows a low-privileged, network-attacker with access via multiple protocols to cause a hang or cr...

CVE-2021-35546

The CVE-2021-35546 entry concerns Oracle MySQL Server (component: Server: Replication). Affected software: MySQL Server 8.0.26 and earlier. Description in sources indicates an easily exploitable vulnerability where a highly privileged attacker with network access via multiple protocols can cause ...

CVE-2020-14809

CVE-2020-14809 affects Oracle MySQL Server (Server: Optimizer). Affected versions are 8.0.21 and earlier. The issue allows a high-privileged attacker who can reach the server over multiple network protocols to cause a hang or frequent crash (DoS) in MySQL Server. The provided documents do not spe...

CVE-2020-14821

CVE-2020-14821 affects Oracle MySQL Server (InnoDB) and targets MySQL 8.0.21 and earlier. An authenticated, high-privilege attacker with network access via multiple protocols can cause a hang or complete DoS of MySQL Server. Public documents identify affected packages and note remediation through...

CVE-2020-14860

Oracle MySQL CVE-2020-14860 affects MySQL Server 8.0.21 and earlier, specifically the Security: Roles component. The vulnerability could allow a high-privileged attacker with network access via multiple protocols to modify data (unauthorized update/insert/delete) in MySQL Server. Root cause and e...

CVE-2020-14869

CVE-2020-14869 affects Oracle MySQL Server, specifically the LDAP Authentication path in the Server component. Affects MySQL 5.7.x up to 5.7.31 and earlier, and 8.0.x up to 8.0.21 and earlier. An attacker with network access can exploit via multiple protocols to cause a hang or a frequently repea...

CVE-2021-35648

CVE-2021-35648 affects Oracle MySQL Server (Server: FTS) prior to 8.0.28-1, allowing a high-privileged attacker with network access to cause a denial-of-service (hang/crash) via the FTS path. Affected versions include 8.0.26 and earlier. Remediation noted in connected data: upgrade to 8.0.28-1 or...

CVE-2022-21336

The CVE-2022-21336 entry corresponds to Oracle MySQL Cluster (Cluster: General). Affected releases include 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability is exploitable by a high-privilege attacker with access to the hardware’s physical commu...

CVE-2022-21486

CVE-2022-21486 affects Oracle MySQL Cluster (Cluster: General). Affected versions include 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior, and 8.0.28 and prior. The vulnerability’s root cause allows a high-privileged attacker with access to the physical communication segment to compromise th...

CVE-2021-35591

Oracle MySQL Server (component: Server: DML) is affected in versions 8.0.26 and earlier. Root cause details are not explicitly provided in the documents, but multiple advisories indicate a high-privilege attacker with network access via multiple protocols could cause a hang or complete DoS of MyS...

CVE-2021-35596

CVE-2021-35596 affects Oracle MySQL Server (component: Server: Error Handling). Affected versions are 8.0.26 and earlier. The vulnerability can be triggered by a high‑privilege attacker with network access via multiple protocols, potentially causing the MySQL Server to hang or crash (DoS). Severa...

CVE-2022-21282

CVE-2022-21282 is a combined Java/Oracle Java SE/GraalVM issue reported across multiple advisories. The connected documents identify assorted affected components and versions, notably: Serialization , JAXP , Libraries , Hotspot , and ImageIO within Oracle Java SE and GraalVM Enterprise Edition. A...

CVE-2020-14575

The CVE-2020-14575 entry concerns Oracle MySQL Server (Server: DML) affecting 8.0.20 and earlier. The vulnerability is exploitable remotely over multiple protocols by a high-privilege attacker and can cause a hang or frequent crash (DoS) of MySQL Server. The CVSS 3.1 base score is 4.9 (Availabili...

CVE-2022-21340

CVE-2022-21340 concerns Oracle Java SE and GraalVM Enterprise Edition. The vulnerability affects Oracle Java SE components (Libraries) and GraalVM Enterprise Edition libraries listed as affected: Java SE 7u321, 8u311, 11.0.13, 17.0.1; GraalVM Enterprise Edition 20.3.4 and 21.3.0. The description ...

CVE-2021-3522

CVE-2021-3522 affects GStreamer before 1.18.4, where an out-of-bounds read may occur when handling certain ID3v2 tags. The issue is evidenced in multiple connected documents (e.g., Astra Linux advisory and Amazon Linux advisories) referencing an out-of-bounds read impacting availability. The conc...

CVE-2021-35565

CVE-2021-35565 affects Java SE (JSSE) and OpenJDK components across Java releases (7u311, 8u301, 11.0.12) and Oracle GraalVM Enterprise Edition (20.3.3, 21.2.0). The issue arises in TLS handling via the HttpsServer, enabling an unauthenticated network attacker to cause a partial denial of service...

CVE-2022-21249

CVE-2022-21249 affects Oracle MySQL Server (Server: DDL) with affected versions up through 8.0.27 and earlier. The issue can be triggered by an attacker with network access via multiple protocols, potentially enabling a partial DoS on MySQL Server. The connected documents confirm affected package...

CVE-2022-21328

CVE-2022-21328 relates to Oracle MySQL Cluster. Connected CNVD entry describes an input validation error in Oracle MySQL Cluster, making the cluster vulnerable to an attacker who can execute arbitrary code via that flaw. Affected are MySQL Cluster components for versions 7.4.34 and prior, 7.5.24 ...

CVE-2022-21331

The CVE-2022-21331 issue affects Oracle MySQL Cluster (Cluster: General) with affected versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability could allow an attacker with high privileges who has access to the hardware’s physical network segment to r...

CVE-2022-21434

CVE-2022-21434 affects Oracle Java SE and GraalVM Enterprise Edition. Connected advisories list multiple vulnerable components and affected versions: Oracle Java SE libraries and JAXP, as well as GraalVM EE components (Libraries, JAXP, Hotspot, 2D, ImageIO, etc.). Exploitation is described as net...

CVE-2024-20965

CVE-2024-20965 affects Oracle MySQL Server (Server: Optimizer) on 8.0.35 and earlier and 8.2.0 and earlier. Affected component and underlying issue allow a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DOS). Mitigation: upgrade to a fixed version (e....

CVE-2021-2203

CVE-2021-2203 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.23 and earlier. Description indicates an easily exploitable vulnerability that, with network access via multiple protocols, could allow a high-privilege attacker to cause a hang or frequent crashes of My...

CVE-2023-22110

CVE-2023-22110 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.33 and earlier. Vulnerability allows a high-privilege, remote attacker to cause a hang or frequent, repeatable crashes (complete DOS) via network access across multiple protocols. Base score 4.9 (Availability impa...

CVE-2019-2969

CVE-2019-2969 is a vulnerability in Oracle MySQL Server, specifically the client programs component. The connected sources indicate affected MySQL Server client-side code with versions 5.6.44 and earlier, 5.7.26 and earlier, and 8.0.16 and earlier. The issue is exploitable by an unauthenticated a...

CVE-2020-2593

CVE-2020-2593 affects multiple OpenJDK/JRE components across the Java SE/Embedded stack (Networking, Security, Serialization, 2D, JAXP, Libraries, etc.). Connected advisories enumerate affected versions including Java SE 7u231/7u241, 8u221/8u231, 11.0.4/11.0.5, and 13.0.1, with OpenJDK builds for...

CVE-2024-21102

CVE-2024-21102 affects Oracle MySQL Server (component: Server: Thread Pooling). Affected versions are 8.0.36 and earlier, and 8.3.0 and earlier. The description states an easily exploitable vulnerability that, with network access via multiple protocols and a high-privilege attacker, can lead to a...

CVE-2019-2948

CVE-2019-2948 is a vulnerability in Oracle MySQL Server (component: Server: Optimizer). Affected versions are 5.7.26 and earlier, and 8.0.16 and earlier. It permits a high-privilege attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (DoS). The conne...

CVE-2022-21253

CVE-2022-21253 affects Oracle MySQL Server (Server: Optimizer) with the 8.0.27 and earlier versions. The vulnerability allows a high-privilege attacker who can reach the server over network protocols to cause a hang or frequent, repeatable crash (complete DoS). The connected advisories indicate r...

CVE-2022-21265

CVE-2022-21265 affects Oracle MySQL Server (Server: Optimizer) on 8.0.27 and earlier. The vulnerability arises in the Optimizer component and can allow a high-privileged attacker with network access via multiple protocols to update/insert/delete data and cause partial denial of service. Remediati...

CVE-2022-21303

CVE-2022-21303 affects Oracle MySQL Server (component: Server: Stored Procedure). Affected versions are MySQL 5.7.36 and earlier and 8.0.27 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequent crash (DoS) on the My...

CVE-2022-21304

CVE-2022-21304 affects Oracle MySQL Server (Server: Parser). Affected versions: MySQL 5.7.36 and earlier; 8.0.27 and earlier. The vulnerability can be exploited by a privileged attacker with network access via multiple protocols to cause the server to hang or crash (partial/complete DoS) as descr...