CVE-2022-21316

CVE-2022-21316 affects Oracle MySQL Cluster (Cluster: General) with affected versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability is exploitable by a high-privilege actor with logon to the infrastructure where MySQL Cluster runs, and requires user...

CVE-2022-21625

Vulnerability CVE-2022-21625 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.30 and earlier. Underlying issue in the Optimizer can allow a high-privilege attacker with network access (via multiple protocols) to cause a hang or crash (DoS) of MySQL Server. Exploitation require...

CVE-2022-21349

CVE-2022-21349 is an Oracle Java SE/GraalVM Enterprise Edition vulnerability affecting multiple Java components (e.g., 2D, ImageIO, JAXP, Hotspot, Libraries) across affected releases. Public advisories show affected Java SE versions (e.g., 7u321, 8u311) and GraalVM EE releases (20.3.4, 21.3.0). E...

CVE-2022-21425

The CVE-2022-21425 issue affects Oracle MySQL Server (component: Server: DDL) with affected versions 8.0.28 and older. The vulnerability enables a high-privilege attacker who can reach MySQL Server over the network via multiple protocols to cause a hang or crash (denial of service) and potentiall...

CVE-2022-39400

CVE-2022-39400 affects Oracle MySQL Server (Server: Optimizer) and applies to MySQL 8.0.30 and earlier. The vulnerability can be exploited over the network by a user with high privileges, potentially causing the server to hang or crash (DoS). Public advisories indicate fixes in newer MySQL 8.0 re...

CVE-2023-21955

CVE-2023-21955 affects Oracle MySQL Server (component: Server: Partition); affected versions are 8.0.32 and earlier. It is a network-exploitable vulnerability that can allow a high-privileged attacker to cause a hang or frequent crash (DOS). CVSS v3.1 Base Score 4.9 (A: High, Availability). Publi...

CVE-2019-16942

CVE-2019-16942 affects FasterXML jackson-databind 2.0.0–2.9.10. When Default Typing is enabled for an externally exposed JSON endpoint and the service includes the commons-dbcp 1.4 jar on the classpath, with an accessible RMI endpoint, the vulnerability can allow execution of a malicious payload ...

CVE-2019-2992

CVE-2019-2992 affects Oracle Java SE/OpenJDK Java SE/Embedded, with vulnerable components including the 2D renderer. The connected documents show a concrete root cause: in the 2D component (font rendering), excess memory allocation during operations such as font glyph mapping can lead to a denial...

CVE-2022-21339

The CVE-2022-21339 entry refers to a vulnerability in Oracle MySQL Server (component: Server: Optimizer) affecting MySQL 8.0.27 and prior. The root cause is unspecified in the provided description beyond the Optimizer impact, with an attacker that must have network access via multiple protocols a...

CVE-2022-21351

CVE-2022-21351 affects Oracle MySQL Server (Server: Optimizer). Affected versions: 8.0.27 and prior. Root cause: input validation error in the Server: Optimizer component. Impact: can allow a low-privileged attacker with network access to cause a hang or a frequent crash (DoS) and unauthorized up...

CVE-2022-21370

CVE-2022-21370 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions up to 8.0.27. Root cause cited as an input validation/optimizer issue that could enable a high-privilege, network-remote attacker to cause a hang or complete DOS of MySQL Server. Public references show fixes i...

CVE-2022-21611

CVE-2022-21611 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.30 and earlier. The vulnerability is described as a high-privilege, local issue that can lead to a hang or complete denial of service of MySQL Server. The available connected sources consistently map this CVE to InnoDB...

CVE-2022-21633

CVE-2022-21633 is a Denial-of-Service vulnerability in Oracle MySQL Server (Server: Replication) affecting MySQL 8.0.30 and earlier. An attacker with network access via multiple protocols can cause the server to hang or crash. Remediation appears to be upgrading to MySQL 8.0.32 (per ALSA-2023:308...

CVE-2024-21069

CVE-2024-21069 affects Oracle MySQL Server (Server: DDL). Affected versions are 8.0.36 and prior and 8.3.0 and prior. The vulnerability can be triggered by a high-privileged attacker with network access via multiple protocols to cause a hang or frequent crash (DoS) of MySQL Server. No remediation...

CVE-2018-3276

CVE-2018-3276 affects the Oracle MySQL Server component (subcomponent: Server: Memcached). Affected are MySQL versions 5.6.41 and prior, 5.7.23 and prior, and 8.0.12 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the MySQL Se...

CVE-2024-21009

CVE-2024-21009 affects Oracle MySQL Server (Server: Optimizer). Affected are MySQL 8.0.36 and earlier and 8.3.0 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or a frequent crash (denial of service). The CVSS...

CVE-2020-11612

Netty CVE-2020-11612 affects Netty 4.1.x before 4.1.46, where ZlibDecoders may allocate memory without bounds while decoding a ZlibEncoded stream, potentially exhausting server memory. Affected product: Netty 4.1.x (ZlibDecoders). Remediation: upgrade to Netty 4.1.46.Final or later. The documents...

CVE-2022-21311

CVE-2022-21311 affects Oracle MySQL Cluster (Cluster: General) with vulnerable versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The issue, in MySQL Cluster, can allow a highly privileged attacker with access to the hardware’s physical communication segment to r...

CVE-2023-21935

CVE-2023-21935 affects Oracle MySQL Server (Server: Optimizer) in 8.0.32 and earlier; exploit leads to high-privilege remote denial of service (hangs/crashes). Mitigation is upgrading to a patched MySQL 8.0.x release (vendor advisories and distro updates list 8.0.33+ and newer, e.g., Fedora/AlmaL...

CVE-2018-3247

CVE-2018-3247 affects Oracle MySQL Server, subcomponent Server: Merge. Affected versions are MySQL 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or frequent...

CVE-2022-21372

CVE-2022-21372 affects Oracle MySQL Server (MySQL) 8.0.27 and earlier, with vulnerable area in Server: Security: Encryption (and related input validation in the optimizer per CNVD/CNNVD). The result is a potential partial denial of service with network access via multiple protocols. Exploitation ...

CVE-2019-16335

CVE-2019-16335 is a vulnerability in FasterXML jackson-databind (pre-2.9.10) related to polymorphic typing in the HikariDataSource path. Connected sources confirm the affected component is jackson-databind and specifically the serialization gadgets involving com.zaxxer.hikari.HikariDataSource. Im...

CVE-2022-21310

CVE-2022-21310 affects Oracle MySQL Cluster (Cluster: General). Affected versions are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability is exploitable with adjacent network access, but requires high privileges and user interaction; attacker must be phys...

CVE-2022-39408

CVE-2022-39408 affects Oracle MySQL Server (Server: Optimizer) and targets the MySQL 8.0 line (8.0.30 and earlier). The vulnerability allows a low-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS) of MySQL Server. Public details in the provided docs conf...

CVE-2018-3212

CVE-2018-3212 affects Oracle MySQL Server, subcomponent Server: Information Schema. Affected versions are 8.0.12 and prior. An attacker with network access and high privileges can cause a denial of service via hang or crash of the MySQL Server. Connected Fedora notices indicate this CVE was fixed...

CVE-2022-21297

CVE-2022-21297 affects Oracle MySQL Server (Server: Optimizer). Affected products/versions: MySQL 8.0.26 and earlier. Root cause described in public sources: vulnerability in the Server: Optimizer that can be triggered by network access via multiple protocols by a high-privileged attacker, leadin...

CVE-2022-21321

CVE-2022-21321 affects Oracle MySQL Cluster (Cluster: General). Affected: MySQL Cluster products at least up to 7.6.20, 7.5.24, 7.4.34 and 8.0.27 (per NVD/CVE records). Root cause details are not provided here, but the vulnerability allows an attacker with access to the physical communication seg...

CVE-2022-21362

CVE-2022-21362 affects Oracle MySQL Server (component: Server: Information Schema). Affected versions are 8.0.27 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause the MySQL Server to hang or crash, resulting in a complete/partial ...

CVE-2022-21599

CVE-2022-21599 affects Oracle MySQL Server (Stored Procedure) in 8.0.30 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to trigger a hang or crash of MySQL Server (DoS). Public advisories in the connected documents indicate this CVE is f...

CVE-2018-3062

CVE-2018-3062 affects Oracle MySQL Server (Memcached subcomponent). Affected versions are MySQL 5.6.40 and earlier, 5.7.22 and earlier, and 8.0.11 and earlier. The vulnerability can be exploited by a low-privileged attacker over the memcached network interface to cause the MySQL server to hang or...

CVE-2018-3203

CVE-2018-3203 affects Oracle MySQL Server (Server: Optimizer). A vulnerability in the Server: Optimizer could be exploited by a low-privilege, network-accessible attacker to cause a hang or frequent, repeatable crashes (DoS). Affected are MySQL Server versions up to 8.0.12 and earlier. The initia...

CVE-2019-14379

CVE-2019-14379 affects FasterXML jackson-databind prior to 2.9.9.2, where default typing mishandling when ehcache is present (via net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup) leads to remote code execution. Affected component is jackson-databind’s data-binding implementatio...

CVE-2022-21342

CVE-2022-21342 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions: 8.0.27 and earlier. Exploitation requires network access via multiple protocols by a high-privilege attacker and can cause the server to hang or crash, resulting in a complete DOS (CVSS v3.1 base 4.9). M...

CVE-2022-21604

CVE-2022-21604 affects Oracle MySQL Server (InnoDB) up to version 8.0.30. The root cause is an InnoDB vulnerability that enables a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (denial of service). Impact is availability loss for MySQL Server...

CVE-2022-21283

CVE-2022-21283 affects Oracle Java SE (Libraries) and GraalVM Enterprise Edition, with affected versions including Java SE 11.0.13 and 17.0.1, and GraalVM EE 20.3.4/21.3.0. The vulnerability allows unauthenticated network-based access and can cause a partial denial of service (A: PARTIAL) per CVS...

CVE-2022-21368

CVE-2022-21368 affects Oracle MySQL Server (component: Server: Components Services) with affected versions 8.0.27 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to perform unauthorized updates, inserts, deletes, and reads of MySQL data,...

CVE-2022-21635

CVE-2022-21635 affects Oracle MySQL Server (InnoDB) with vulnerable 8.0.29 and earlier. Root cause: InnoDB component allows high-privilege attacker with network access via multiple protocols to modify data or cause a DoS via hangs/crashes. Affected packages include MySQL Server; Debian/Mariner en...

CVE-2024-21051

CVE-2024-21051 concerns Oracle MySQL Server (component: Server: DML). Affected are 8.0.34 and earlier. The vulnerability is exploitable by an attacker with network access through multiple protocols and can lead to a hang or frequently repeatable crash (complete DoS) of MySQL Server. The CVSSv3.1 ...

CVE-2018-3067

CVE-2018-3067 pertains to Oracle MySQL Server, specifically the Server: Replication subcomponent. The vulnerability affects MySQL 8.0.11 and earlier and can be exploited by a highly privileged attacker with network access via multiple protocols, potentially causing a hang or a frequently occurrin...

CVE-2018-3137

CVE-2018-3137 : In Oracle MySQL, the MySQL Server component (Server: Optimizer) is affected. Affected versions are 8.0.12 and earlier. An attacker with network access via multiple protocols and low privileges can remotely cause the server to hang or crash (denial of service). CVSS v3.1 base score...

CVE-2018-3145

CVE-2018-3145 affects Oracle MySQL Server (Server: Parser) with impact on availability. Affected: MySQL Server 8.0.12 and earlier; vulnerability allows a low-privilege, network-accessible attacker to trigger a hang or frequent crash (DoS) via multiple protocols. CVSS 3.0 base score 6.5 (AV:N/AC:L...

CVE-2019-2513

CVE-2019-2513 affects Oracle MySQL Server Shell in MySQL 8.0.13 and earlier. A low-privilege, locally authenticated attacker who can log on to the infrastructure where MySQL Server runs can compromise the server, with successful attacks enabling read access to a subset of data. The vulnerability ...

CVE-2020-14591

CVE-2020-14591 affects MySQL Server (Oracle MySQL) specifically the Server: Audit Plug-in. Affected versions are 8.0.20 and earlier. The vulnerability allows a low-privileged attacker who can reach MySQL over multiple network protocols to cause a hang or a frequently repeatable crash (a full avai...

CVE-2022-21348

CVE-2022-21348 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.27 and earlier. The vulnerability allows a high-privilege attacker with network access to cause a hang or frequent crashes in MySQL Server (complete DoS) per the CVE description. Connected advisories indicate mitigatio...

CVE-2023-21962

CVE-2023-21962 affects Oracle MySQL Server (Server: Components Services). Affected: MySQL 8.0.32 and earlier. Attackers with network access via multiple protocols can exploit this to cause a hang or frequent crash (DOS). CVSS v3.1 base score 4.9 (Availability). The provided documents identify the...

CVE-2022-21317

CVE-2022-21317 affects Oracle MySQL Cluster (Cluster: General). Affected versions: 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. Root cause enables a high-privilege attacker with access to the hardware network segment to read data from the MySQL Cluster and c...

CVE-2022-21637

CVE-2022-21637 affects MySQL Server (InnoDB) with affected versions 8.0.30 and earlier. Root cause involves InnoDB vulnerability leading to a complete DOS (hang/crash) under network access with high privileges. Remediation observed in connected data shows upgrades to MySQL 8.0.32 (e.g., AlmaLinux...

CVE-2022-21640

CVE-2022-21640 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.30 and earlier. Description across connected documents indicates an unspecified vulnerability in the Optimizer that can enable a high-privilege attacker with network access to cause a hang or crashes (D...

CVE-2024-21005

CVE-2024-21005 affects Oracle Java SE / GraalVM Enterprise Edition (JavaFX). Affected: Oracle Java SE 8u401; GraalVM EE 20.3.13 and 21.3.9. Description notes a difficult-to-exploit vulnerability that requires network access via multiple protocols and user interaction, with potential unauthorized ...

CVE-2022-21326

CVE-2022-21326 affects Oracle MySQL Cluster (component: Cluster: General). Affected versions include 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability is exploitable by a high-privilege attacker with access to the physical communication segment attached...