CVE-2020-14775

CVE-2020-14775 affects Oracle MySQL Server InnoDB. Affects MySQL Server versions 5.7.31 and earlier and 8.0.21 and earlier; exploitation can cause the server to hang or crash (DoS) via network access across multiple protocols. Remediation in public advisories includes upgrading to fixed releases:...

CVE-2018-3173

CVE-2018-3173 affects the MySQL Server component (InnoDB) of Oracle MySQL. Affected: MySQL 5.7.23 and earlier and 8.0.12 and earlier; exploitation via network could cause a hang or crash (DoS) with high privileges over multiple protocols. Connected advisories indicate fixed releases exist (e.g., ...

CVE-2020-10878

Perl before 5.30.3 contains an integer overflow in the regular expression compiler (related to PL_regkind[OP(n)] == NOTHING). A crafted regex can produce malformed bytecode with a possibility of instruction injection, as documented by multiple advisories and CVEs (e.g., CVE-2020-10878). Public re...

CVE-2020-14577

CVE-2020-14577 is a TLS/JSSE-related issue in Oracle Java SE and Java SE Embedded (affecting Java 7u261, 8u251, 11.0.7 and 14.0.1; Embedded 8u251) enabling unauthenticated network access to read some data. Connected advisories show vendor-specific mitigations: for example, Amazon Linux ALAS advis...

CVE-2020-2572

CVE-2020-2572 affects Oracle MySQL Server, specifically the Server: Audit Plugin. Affected versions: MySQL 5.7.28 and earlier, and 8.0.18 and earlier. Root cause: vulnerability in the Audit Plugin that can be exploited remotely by a high-privilege, unauthenticated attacker to potentially update/i...

CVE-2020-2654

CVE-2020-2654 affects Oracle Java SE Libraries in Java SE 7u241, 8u231, 11.0.5 and 13.0.1 (Java SE and Java SE Embedded) with the issue described as an unauthenticated network-access vulnerability that can cause a partial denial of service. The root cause is tied to the Libraries component (with ...

CVE-2020-2765

CVE-2020-2765 is a vulnerability in Oracle MySQL Server, specifically the Server: Optimizer component. Affected versions are MySQL 5.7.29 and earlier, and 8.0.19 and earlier. The issue can be exploited with network access via multiple protocols by a high-privilege attacker to cause a hang or a co...

CVE-2018-3185

CVE-2018-3185 is a MySQL Server (InnoDB) vulnerability affecting 5.7.23 and earlier and 8.0.12 and earlier. The connected F5 advisory confirms exploitable remote access via multiple protocols by a high-privilege attacker, potentially causing a hang or crash (DoS) and unauthorized data updates. Th...

CVE-2021-2056

CVE-2021-2056 affects Oracle MySQL Server (component: Server: DML). Affected: MySQL 8.0.22 and earlier. An attacker with network access via multiple protocols and who has high privileges can exploit to cause a hang or crash (complete DoS). CVSS v3.1 base score 4.4 (Availability). No exploit detai...

CVE-2020-14785

CVE-2020-14785 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions up to 8.0.21 and earlier. The issue allows a high-privilege attacker who can reach the server over multiple network protocols to cause the MySQL Server to hang or crash, producing a denial of service. Practica...

CVE-2022-21619

CVE-2022-21619 affects Oracle Java SE (Security) and Oracle GraalVM Enterprise Edition. Affected Java SE versions: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; GraalVM Enterprise Edition: 20.3.7, 21.3.3, 22.2.0. The vulnerability allows unauthenticated network access to compromise affected product...

CVE-2018-3277

CVE-2018-3277 affects the MySQL Server component (subcomponent: InnoDB). Affected versions are 5.7.23 and prior and 8.0.12 and prior. The vulnerability is exploitable by a high-privilege attacker with network access via multiple protocols, and can lead to a hang or a frequent crash of MySQL Serve...

CVE-2020-14697

CVE-2020-14697 affects Oracle MySQL MySQL Server (Server: Security: Privileges). Affected versions are 8.0.20 and earlier. The vulnerability is described as easily exploitable with network access via multiple protocols, allowing a high-privilege attacker to take over MySQL Server. Public referenc...

CVE-2021-2065

CVE-2021-2065 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.22 and earlier. Attack requires high privileges and network access; an attacker can cause a hang or crash (complete DoS) in MySQL Server. Remediation: upgrade to a patched release (e.g., MySQL 8.0.26 or ...

CVE-2018-3284

CVE-2018-3284 affects Oracle MySQL Server (InnoDB subcomponent) and related MySQL Server components. Affected versions: 5.7.23 and earlier, and 8.0.12 and earlier. The flaw allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS). Connected adviso...

CVE-2022-21299

CVE-2022-21299 is reported across multiple feeds as affecting Oracle Java SE and GraalVM Enterprise Edition, involving several components (JAXP, Serialization, Libraries, ImageIO, Hotspot, 2D). Affected Java SE versions include 7u321, 8u311, 11.0.13, 17.0.1; GraalVM EE versions 20.3.4 and 21.3.0....

CVE-2024-21085

CVE-2024-21085 is described across multiple sources as a low-severity issue affecting Oracle Java SE and GraalVM/OpenJDK components. Affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13, 21.3.9 (plus related OpenJDK/OpenJDK11 advisories). The vulnera...

CVE-2020-2573

CVE-2020-2573 affects Oracle MySQL’s C API client. Affects: MySQL Client, versions 5.7.28 and earlier, and 8.0.18 and earlier. Root cause: a vulnerability in the C API that allows an unauthenticated, network-based attacker access via multiple protocols to cause a hang or frequent, repeatable cras...

CVE-2021-2042

CVE-2021-2042 affects the MySQL Server component InnoDB in Oracle MySQL. Affected versions are 8.0.21 and earlier. The vulnerability is exploitable by a high-privilege attacker who has local access to the MySQL server, enabling unauthorized read access to a subset of MySQL data. The CVSS 3.1 Base...

CVE-2020-14567

CVE-2020-14567 affects MySQL Server (Replication) and can be exploited over the network by a high-privilege attacker to cause a complete DoS via hangs/crashes. Public sources in connected docs confirm the issue across multiple distributions and indicate patches exist; applying vendor advisories/u...

CVE-2020-2923

CVE-2020-2923 affects Oracle MySQL Server, component Server: Optimizer, with affected versions 8.0.19 and earlier. The vulnerability allows a high-privileged attacker who can access the service over network through multiple protocols to cause a hang or crash (Denial of Service). The connected Alm...

CVE-2021-2020

CVE-2021-2020 concerns Oracle MySQL Server (Server: Optimizer) with affected versions 8.0.20 and prior. The vulnerability can be exploited by a low-privilege attacker with network access via multiple protocols to cause the MySQL Server to hang or crash, resulting in a complete denial of service. ...

CVE-2021-2070

CVE-2021-2070 affects Oracle MySQL Server (Server: Optimizer). An attacker with network access via multiple protocols and high privileges could cause a hang or crash (DoS) in MySQL Server; affected versions include 8.0.22 and earlier. Public details in the connected documents confirm the vulnerab...

CVE-2021-2226

CVE-2021-2226 affects Oracle MySQL Server (Server: Information Schema). Affected: MySQL 5.7.33 and older, 8.0.23 and older. Description in the provided docs notes an easily exploitable issue that could allow a high-privileged attacker with network access via multiple protocols to compromise data ...

CVE-2020-14581

CVE-2020-14581 affects Oracle Java SE/Java SE Embedded (component: 2D) with affected versions Java SE: 8u251, 11.0.7, 14.0.1 and Java SE Embedded: 8u251. The CVE is listed with a low overall base score (CVSS 3.1: 3.7) and confidentiality impact (C:L) and no impact on integrity/availability (I:N/A...

CVE-2020-14663

CVE-2020-14663 affects Oracle MySQL Server (component: Server: Security: Privileges). Affected: MySQL 8.0.20 and earlier. Root cause: privilege escalation through the Server security subsystem allowing a high-privilege attacker to compromise the MySQL Server over network via multiple protocols. I...

CVE-2020-2686

CVE-2020-2686 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected versions are 8.0.18 and earlier. The vulnerability allows a low-privileged attacker with network access via multiple protocols to potentially cause a hang or a frequently repeating crash (complete DO...

CVE-2021-2002

CVE-2021-2002 affects the MySQL Server, specifically the replication server component. Affected are 8.0.22 and earlier. The vulnerability can be exploited by a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash (DoS) of MySQL Serve...

CVE-2021-2028

CVE-2021-2028 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.21 and earlier. Vulnerability details: a high-privilege attacker with network access via multiple protocols can cause a complete DoS by hanging or crashing the MySQL Server. This matches the initial vulnerability descri...

CVE-2021-36222

CVE-2021-36222 affects MIT Kerberos 5 (krb5) KDC: the ec_verify path in kdc/kdc_preauth_ec.c can trigger a NULL pointer dereference and daemon crash. The issue occurs in KDC processing for PA-ENCRYPTED-CHALLENGE data when not correctly handling a return value in certain situations, leading to a d...

CVE-2020-14867

CVE-2020-14867 affects Oracle MySQL Server (Server: DDL). Affected versions are 5.6.49 and earlier, 5.7.31 and earlier, and 8.0.21 and earlier. The vulnerability can be exploited by a highly privileged attacker with network access via multiple protocols to cause the MySQL Server to hang or crash ...

CVE-2020-2804

CVE-2020-2804 affects Oracle MySQL Server, component Server: Memcached . Affected versions include 5.6.47 and earlier, 5.7.29 and earlier, and 8.0.19 and earlier. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a hang or crash (complete DOS...

CVE-2020-8174

CVE-2020-8174 is a Node.js vulnerability where napi_get_value_string_*() can trigger memory corruption in affected releases. Affected are Node.js runtimes prior to 10.21.0, 12.18.0, and prior to 14.4.0. Documented mitigations/include patches update Node.js to 10.21.0, 12.18.2, and 14.4.0 respecti...

CVE-2021-35567

CVE-2021-35567 affects Oracle Java SE and GraalVM Enterprise Edition libraries; root cause is incorrect principal selection when Kerberos Constrained Delegation is used. Affected: Java SE 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0 (Libraries component). Impact includes potential unauthorized...

CVE-2020-14773

CVE-2020-14773 affects Oracle MySQL Server (Server: Optimizer). Affected versions: 8.0.21 and earlier. An attacker with high privileges and network access via multiple protocols can trigger a hang or crash (DoS) of MySQL Server. The entry does not describe specific exploit vectors or affected con...

CVE-2021-2122

CVE-2021-2122 affects Oracle MySQL Server (Server: DDL). Affected: MySQL 8.0.22 and earlier. Description in the CVE notes an easily exploitable vulnerability that, with network access via multiple protocols and a high-privilege attacker, can cause the MySQL Server to hang or crash (DoS). Connecte...

CVE-2021-2230

CVE-2021-2230 affects the Oracle MySQL Server, specifically the Server: Optimizer component. Affected versions are 8.0.23 and earlier . The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or crash in MySQL Server, i.e., a DoS ...

CVE-2021-35556

CVE-2021-35556 is a vulnerability in the Swing component of Java SE (and related GraalVM Enterprise Edition versions) affecting Java SE 7u311, 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0. An unauthenticated attacker with network access via multiple protocols can potentially exploit this to ca...

CVE-2020-14777

Oracle MySQL Server vulnerability CVE-2020-14777 affects the Server: Optimizer in MySQL 8.0.21 and earlier. An attacker with network access via multiple protocols and high privileges can cause the server to hang or crash (DoS). Affected product/version details are supported in connected documents...

CVE-2020-14844

CVE-2020-14844 affects Oracle MySQL Server (Server: PS) in 8.0.21 and earlier. An attacker with network access across multiple protocols could exploit this to cause a hang or crash (DoS). CVSS 3.1 base score 4.9 (Availability). Remediation mentioned in connected docs: upgrade to MySQL 8.0.26 or n...

CVE-2020-2803

CVE-2020-2803 affects OpenJDK (Libraries component, Java SE/OpenJDK). The connected document confirms a vulnerability in boundary checks of java.nio buffer classes that allows an untrusted Java applet/application to bypass Java sandbox restrictions. Affected versions align with the original descr...

CVE-2020-2897

CVE-2020-2897 affects Oracle MySQL Server (component: Server: Optimizer) with affected versions 8.0.19 and earlier. The vulnerability enables a high-privilege attacker who can reach the server over multiple network protocols to cause a hang or frequent crash (denial of service) of MySQL Server. T...

CVE-2018-11212

CVE-2018-11212 affects libjpeg/libjpeg-turbo: the alloc_sarray function in jmemmgr.c allows a remote attacker to cause a denial of service via a crafted file due to a divide-by-zero error. Public advisories (e.g., ALAS2-2019-1198, ALAS-2019-1286, AL2/ALSA-centos/CESA-2019:2052, Debian DLA-1638-1)...

CVE-2020-14539

CVE-2020-14539 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions 5.6.48 and earlier, 5.7.30 and earlier, and 8.0.20 and earlier. Exploitation can cause a hang or crash (DoS) with network access via multiple protocols. Cited connected advisories recommend upgrading to non-vu...

CVE-2021-2154

CVE-2021-2154 affects Oracle MySQL Server (Server: DML) with vulnerable 5.7.33 and earlier. The connected advisories link this to MariaDB/Mysql family and state an attacker with network access via multiple protocols can cause a hang or a frequent crash (complete DoS) of MySQL/MariaDB Server. The ...

CVE-2021-2171

CVE-2021-2171 affects Oracle MySQL Server (Server: Replication). Affected versions: MySQL 5.7.33 and earlier and 8.0.23 and earlier. The flaw allows a high-privilege attacker with network access via multiple protocols to cause the MySQL Server to hang or crash (DoS). The connected advisories indi...

CVE-2021-35588

CVE-2021-35588 is a vulnerability in Oracle Java SE and GraalVM Enterprise Edition (Hotspot component) affecting Java SE 7u311 and 8u301 and GraalVM Enterprise Edition 20.3.3/21.2.0. The issue allows an unauthenticated, network-accessible attacker to exploit multiple protocols after user interact...

CVE-2019-2991

CVE-2019-2991: A vulnerability in Oracle MySQL Server (Server: Optimizer) affects MySQL 8.0.x

CVE-2020-14830

CVE-2020-14830 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.21 and earlier. Description across sources: low-privilege attacker with network access via multiple protocols can cause the MySQL Server to hang or frequently crash (complete DoS). The connected documents confirm ...

CVE-2021-35561

CVE-2021-35561 affects Oracle Java SE/GraalVM Enterprise Edition across multiple components (e.g., Utility, Swing, ImageIO, Keytool, JSSE) with affected Java SE versions 7u311, 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0. The vulnerability allows unauthenticated network access to cause partia...