CVE-2021-35575

The CVE-2021-35575 vulnerability affects Oracle MySQL Server (component: Server: Optimizer) in affected versions 8.0.26 and earlier. An attacker with network access and high privileges can cause a hang or frequent crashes (DoS). Mitigation: upgrade to a fixed version (per ALSA-2022:7119, which no...

CVE-2021-35612

CVE-2021-35612 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.26 and earlier. Description from multiple sources indicates a high-privilege network-exposed attacker could trigger a hang/crash (DoS) and unauthorized data updates via multiple protocols. Remediation cited in con...

CVE-2021-35647

CVE-2021-35647 affects Oracle MySQL Server (Server: Optimizer). Affected: 8.0.26 and earlier. Description: high-privilege attacker with network access via multiple protocols can cause a hang or crash (DoS) in MySQL Server. CVSS 3.1 base 4.9. Remediation: upgrade to a fixed release (e.g., 8.0.28+ ...

CVE-2022-21264

CVE-2022-21264 affects Oracle MySQL Server, specifically the Server: Optimizer, with vulnerable versions 8.0.27 and prior. The issue enables a high-privilege attacker with network access (via multiple protocols) to cause a hang or frequent, repeatable crash (complete DoS) of MySQL Server. Affecte...

CVE-2022-21296

CVE-2022-21296 affects Oracle Java SE (JAXP, Serialization, Libraries, 2D/Hotspot) and Oracle GraalVM Enterprise Edition. Affected Java SE versions: 7u321, 8u311, 11.0.13, 17.0.1; GraalVM EE: 20.3.4, 21.3.0. The issue allows unauthenticated, network-accessible exploitation that can lead to readin...

CVE-2021-2162

CVE-2021-2162 affects Oracle MySQL Server, specifically the Server: Audit Plug-in component. Affected versions are MySQL 5.7.33 and earlier and 8.0.23 and earlier. The vulnerability can be exploited by a low-privilege attacker with network access via multiple protocols to perform unauthorized upd...

CVE-2021-35626

CVE-2021-35626 affects Oracle MySQL Server (Server: Optimizer) with affected versions 8.0.26 and earlier. The vulnerability is exploitable by a high-privilege attacker over network via multiple protocols and can cause a hang or a frequent crash (complete DOS) of MySQL Server. The CVSS v3.1 base s...

CVE-2022-21365

CVE-2022-21365 is discussed across multiple connected advisories as affecting Oracle Java SE and GraalVM EE components (ImageIO, JAXP, Libraries, Hotspot) with affected Java versions including 7u321, 8u311, 11.0.13, 17.0.1 (and later 17.01 in some entries); GraalVM EE: 20.3.4 and 21.3.0. The desc...

CVE-2023-22059

This CVE (CVE-2023-22059) affects Oracle MySQL Server, specifically the Server: Optimizer component. The vulnerability is present in MySQL 8.0.34 and earlier and in 8.1.0, with a low-privilege, network-access attacker able to exploit via multiple protocols to cause a hang or frequently repeated c...

CVE-2021-35631

The CVE-2021-35631 entry applies to Oracle MySQL Server (Server: GIS) with affected versions 8.0.26 and earlier. It describes a high-privilege attacker who can gain network access via multiple protocols to cause the MySQL server to hang or crash (complete DoS). The risk is supported by CVSS 3.1 v...

CVE-2022-21316

CVE-2022-21316 affects Oracle MySQL Cluster (Cluster: General) with affected versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability is exploitable by a high-privilege actor with logon to the infrastructure where MySQL Cluster runs, and requires user...

CVE-2022-21370

CVE-2022-21370 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions up to 8.0.27. Root cause cited as an input validation/optimizer issue that could enable a high-privilege, network-remote attacker to cause a hang or complete DOS of MySQL Server. Public references show fixes i...

CVE-2022-21425

The CVE-2022-21425 issue affects Oracle MySQL Server (component: Server: DDL) with affected versions 8.0.28 and older. The vulnerability enables a high-privilege attacker who can reach MySQL Server over the network via multiple protocols to cause a hang or crash (denial of service) and potentiall...

CVE-2021-35628

CVE-2021-35628 affects Oracle MySQL Server (Server: Optimizer) in versions 8.0.26 and earlier. A high-privilege attacker with network access via multiple protocols can cause the MySQL Server to hang or crash (DoS). The issue is associated with the Server: Optimizer component and is publicly catal...

CVE-2021-35638

CVE-2021-35638 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.26 and earlier. Exploitation by a high-privilege attacker with network access via multiple protocols can cause a hang or crash (DoS). Remediation in linked advisories shows upgrades to newer builds (e.g., MySQL 8....

CVE-2021-35644

CVE-2021-35644 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.26 and earlier. Description notes a high-privilege attacker with network access via multiple protocols can cause a hang or crash (complete DOS) of MySQL Server. Exploitation and in‑the‑wild details are not provide...

CVE-2022-21339

The CVE-2022-21339 entry refers to a vulnerability in Oracle MySQL Server (component: Server: Optimizer) affecting MySQL 8.0.27 and prior. The root cause is unspecified in the provided description beyond the Optimizer impact, with an attacker that must have network access via multiple protocols a...

CVE-2022-21351

CVE-2022-21351 affects Oracle MySQL Server (Server: Optimizer). Affected versions: 8.0.27 and prior. Root cause: input validation error in the Server: Optimizer component. Impact: can allow a low-privileged attacker with network access to cause a hang or a frequent crash (DoS) and unauthorized up...

CVE-2022-21611

CVE-2022-21611 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.30 and earlier. The vulnerability is described as a high-privilege, local issue that can lead to a hang or complete denial of service of MySQL Server. The available connected sources consistently map this CVE to InnoDB...

CVE-2022-39400

CVE-2022-39400 affects Oracle MySQL Server (Server: Optimizer) and applies to MySQL 8.0.30 and earlier. The vulnerability can be exploited over the network by a user with high privileges, potentially causing the server to hang or crash (DoS). Public advisories indicate fixes in newer MySQL 8.0 re...

CVE-2022-39408

CVE-2022-39408 affects Oracle MySQL Server (Server: Optimizer) and targets the MySQL 8.0 line (8.0.30 and earlier). The vulnerability allows a low-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS) of MySQL Server. Public details in the provided docs conf...

CVE-2024-21069

CVE-2024-21069 affects Oracle MySQL Server (Server: DDL). Affected versions are 8.0.36 and prior and 8.3.0 and prior. The vulnerability can be triggered by a high-privileged attacker with network access via multiple protocols to cause a hang or frequent crash (DoS) of MySQL Server. No remediation...

CVE-2021-35629

CVE-2021-35629 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.25 and earlier. Attackers with network access via multiple protocols and high privileges can cause a hang or frequent crashes (DoS) in MySQL Server. CVSS 3.1 base score 4.9 (Availability). Remediation: upgrade to ...

CVE-2021-35637

CVE-2021-35637 affects Oracle MySQL Server (Server: PS) with affected versions 8.0.26 and earlier. The vulnerability is exploitable by a highly privileged attacker with network access via multiple protocols and can cause a hang or crash (DoS) of MySQL Server. Reported CVSS 3.1 base score is 4.9. ...

CVE-2022-21372

CVE-2022-21372 affects Oracle MySQL Server (MySQL) 8.0.27 and earlier, with vulnerable area in Server: Security: Encryption (and related input validation in the optimizer per CNVD/CNNVD). The result is a potential partial denial of service with network access via multiple protocols. Exploitation ...

CVE-2022-21633

CVE-2022-21633 is a Denial-of-Service vulnerability in Oracle MySQL Server (Server: Replication) affecting MySQL 8.0.30 and earlier. An attacker with network access via multiple protocols can cause the server to hang or crash. Remediation appears to be upgrading to MySQL 8.0.32 (per ALSA-2023:308...

CVE-2018-3212

CVE-2018-3212 affects Oracle MySQL Server, subcomponent Server: Information Schema. Affected versions are 8.0.12 and prior. An attacker with network access and high privileges can cause a denial of service via hang or crash of the MySQL Server. Connected Fedora notices indicate this CVE was fixed...

CVE-2018-3247

CVE-2018-3247 affects Oracle MySQL Server, subcomponent Server: Merge. Affected versions are MySQL 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or frequent...

CVE-2018-3276

CVE-2018-3276 affects the Oracle MySQL Server component (subcomponent: Server: Memcached). Affected are MySQL versions 5.6.41 and prior, 5.7.23 and prior, and 8.0.12 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the MySQL Se...

CVE-2022-21311

CVE-2022-21311 affects Oracle MySQL Cluster (Cluster: General) with vulnerable versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The issue, in MySQL Cluster, can allow a highly privileged attacker with access to the hardware’s physical communication segment to r...

CVE-2024-21009

CVE-2024-21009 affects Oracle MySQL Server (Server: Optimizer). Affected are MySQL 8.0.36 and earlier and 8.3.0 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or a frequent crash (denial of service). The CVSS...

CVE-2021-35537

CVE-2021-35537 affects Oracle MySQL Server (MySQL Protocol, Server: DML) with vulnerable versions 8.0.25 and earlier. Descriptions consistently indicate an attacker with network access can cause a hang or crash (DoS). Remediation in connected docs points to upgrading to a newer MySQL package vers...

CVE-2022-21362

CVE-2022-21362 affects Oracle MySQL Server (component: Server: Information Schema). Affected versions are 8.0.27 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause the MySQL Server to hang or crash, resulting in a complete/partial ...

CVE-2022-21599

CVE-2022-21599 affects Oracle MySQL Server (Stored Procedure) in 8.0.30 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to trigger a hang or crash of MySQL Server (DoS). Public advisories in the connected documents indicate this CVE is f...

CVE-2024-20961

CVE-2024-20961 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.35 and prior, 8.2.0 and prior. Vulnerability allows a low-privilege attacker with network access via multiple protocols to cause the server to hang or crash (DoS). CVSS 3.1 base score 6.5 (Availability: High impac...

CVE-2018-3203

CVE-2018-3203 affects Oracle MySQL Server (Server: Optimizer). A vulnerability in the Server: Optimizer could be exploited by a low-privilege, network-accessible attacker to cause a hang or frequent, repeatable crashes (DoS). Affected are MySQL Server versions up to 8.0.12 and earlier. The initia...

CVE-2022-21297

CVE-2022-21297 affects Oracle MySQL Server (Server: Optimizer). Affected products/versions: MySQL 8.0.26 and earlier. Root cause described in public sources: vulnerability in the Server: Optimizer that can be triggered by network access via multiple protocols by a high-privileged attacker, leadin...

CVE-2022-21321

CVE-2022-21321 affects Oracle MySQL Cluster (Cluster: General). Affected: MySQL Cluster products at least up to 7.6.20, 7.5.24, 7.4.34 and 8.0.27 (per NVD/CVE records). Root cause details are not provided here, but the vulnerability allows an attacker with access to the physical communication seg...

CVE-2018-3067

CVE-2018-3067 pertains to Oracle MySQL Server, specifically the Server: Replication subcomponent. The vulnerability affects MySQL 8.0.11 and earlier and can be exploited by a highly privileged attacker with network access via multiple protocols, potentially causing a hang or a frequently occurrin...

CVE-2018-3145

CVE-2018-3145 affects Oracle MySQL Server (Server: Parser) with impact on availability. Affected: MySQL Server 8.0.12 and earlier; vulnerability allows a low-privilege, network-accessible attacker to trigger a hang or frequent crash (DoS) via multiple protocols. CVSS 3.0 base score 6.5 (AV:N/AC:L...

CVE-2021-35602

CVE-2021-35602 affects Oracle MySQL Server (Server: Options). Affected: MySQL 8.0.26 and earlier. Risk: high privileged attacker with network access via multiple protocols can cause a hang/complete DOS and may gain unauthorized data update/ deletion in accessible data. MITRE/ATT&CK not specified ...

CVE-2021-35635

CVE-2021-35635 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.26 and earlier. Attack requires network access via multiple protocols and a highly privileged attacker could cause a hang or crash (DoS) of MySQL Server (availability impact). Remediation: upgrade to a fixed upstr...

CVE-2022-21310

CVE-2022-21310 affects Oracle MySQL Cluster (Cluster: General). Affected versions are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability is exploitable with adjacent network access, but requires high privileges and user interaction; attacker must be phys...

CVE-2022-21482

CVE-2022-21482 affects Oracle MySQL Cluster (component: Cluster: General). Affected versions are 8.0.28 and earlier. The vulnerability is difficult to exploit and requires high privileges with access to the physical communication segment attached to the hardware where MySQL Cluster runs; user int...

CVE-2022-21604

CVE-2022-21604 affects Oracle MySQL Server (InnoDB) up to version 8.0.30. The root cause is an InnoDB vulnerability that enables a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (denial of service). Impact is availability loss for MySQL Server...

CVE-2024-20967

CVE-2024-20967 affects Oracle MySQL Server (Server: Replication). Affected: MySQL 8.0.35 and prior, 8.2.0 and prior. Attackers with network access via multiple protocols and with high privileges can cause a complete DOS (hang/crash) and unauthorized data updates/deletes. CVSSv3.1: AV:N/AC:L/PR:H/...

CVE-2018-3062

CVE-2018-3062 affects Oracle MySQL Server (Memcached subcomponent). Affected versions are MySQL 5.6.40 and earlier, 5.7.22 and earlier, and 8.0.11 and earlier. The vulnerability can be exploited by a low-privileged attacker over the memcached network interface to cause the MySQL server to hang or...

CVE-2018-3137

CVE-2018-3137 : In Oracle MySQL, the MySQL Server component (Server: Optimizer) is affected. Affected versions are 8.0.12 and earlier. An attacker with network access via multiple protocols and low privileges can remotely cause the server to hang or crash (denial of service). CVSS v3.1 base score...

CVE-2020-14591

CVE-2020-14591 affects MySQL Server (Oracle MySQL) specifically the Server: Audit Plug-in. Affected versions are 8.0.20 and earlier. The vulnerability allows a low-privileged attacker who can reach MySQL over multiple network protocols to cause a hang or a frequently repeatable crash (a full avai...

CVE-2021-35645

CVE-2021-35645 affects Oracle MySQL Server (Server: Optimizer). Affected versions: 8.0.26 and earlier. Vulnerability allows a high-privilege attacker with network access (via multiple protocols) to cause a hang or crash (DoS) of MySQL Server. Remediation shown in connected advisories: upgrade to ...