CVE-2020-14586

CVE-2020-14586 affects Oracle MySQL Server (Server: Security: Privileges). Affected: MySQL 8.0.20 and earlier. Consequence: a high-privilege attacker with network access via multiple protocols can cause the server to hang or crash (complete DoS). Exploit details, affected subcomponents, versions ...

CVE-2020-14804

CVE-2020-14804 affects Oracle MySQL Server (component: Server: FTS). Affected versions: 8.0.21 and earlier. An attacker with high privileges, over the network via multiple protocols, can cause a hang or crash (DoS) in MySQL Server. Remediation in connected docs shows upgrading to MySQL 8.0.26 (an...

CVE-2020-2660

CVE-2020-2660 affects Oracle MySQL's MySQL Server (component: Server: Optimizer). The cited description indicates an easily exploitable, network-accessible vulnerability allowing a high-privilege attacker to cause a hang or a frequent crash (complete DOS) of MySQL Server. Affected versions are 5....

CVE-2021-2299

CVE-2021-2299 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.23 and earlier. Root cause: vulnerability in the Optimizer logic allows a high-privileged, network-proximate attacker to cause a hang or crash (DoS) via multiple protocols. Impact: availability impact (c...

CVE-2021-2305

CVE-2021-2305 affects Oracle MySQL Server (component: Server: DML) and impacts users running MySQL Server 8.0.23 and earlier. The vulnerability arises in the Server: DML area and can be exploited by a high-privilege attacker with network access via multiple protocols, potentially allowing the att...

CVE-2024-21068

CVE-2024-21068 affects Oracle Java SE Hotspot (and related GraalVM/JavaFX components) across multiple supported JDK/OpenJDK lines. Affected versions include 8u401, 11.0.22, 17.0.10, 21.0.2, 22 (and GraalVM JDK 17.0.10/21.0.2/22; EE 21.3.9). Impact is unauthenticated remote compromise with possibl...

CVE-2020-2601

CVE-2020-2601 affects Oracle Java SE and Java SE Embedded Security components. Affected Java SE: 7u241, 8u231, 11.0.5, 13.0.1; Java SE Embedded: 8u231. Root cause is a Kerberos-related issue that can be exploited by an unauthenticated attacker with network access, potentially allowing access to s...

CVE-2019-2966

CVE-2019-2966 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.17 and earlier. It is remotely exploitable by a low-privilege attacker via multiple network protocols to cause a hang or complete denial of service of MySQL Server. Connected advisories (MiracleLin...

CVE-2019-3004

CVE-2019-3004 affects Oracle MySQL Server (component: Server: Parser). Affected: MySQL Server 8.0.17 and earlier. Description: a low-privilege, network-accessible attacker can cause a hang or as-needed crash (complete DOS) of MySQL Server via multiple protocols. Connected documents corroborate pr...

CVE-2020-14620

CVE-2020-14620 affects Oracle MySQL Server (component: Server: DML). Affected are MySQL 8.0.20 and earlier. It enables a high-privileged attacker with network access via several protocols to cause a hang or crash (complete DOS) of MySQL Server. The description does not provide root-cause specific...

CVE-2020-14623

CVE-2020-14623 is an InnoDB-related vulnerability in Oracle MySQL Server (8.0.x; affected 8.0.20 and earlier) that could allow a highly privileged attacker with network access via multiple protocols to cause a hang or crash (DOS). The issue is cited across multiple advisories ( MiracleLinux AXSA-...

CVE-2020-14702

CVE-2020-14702 affects Oracle MySQL Server (MySQL 8.0 family, up to 8.0.20). The issue is in Server: Privileges, enabling a high-privileged attacker with network access via multiple protocols to cause a hang or complete denial-of-service against MySQL Server. Exploitation details are not provided...

CVE-2020-14829

CVE-2020-14829 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.21 and earlier. The flaw allows a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (complete DoS) of MySQL Server. CVSS v3.1 base score is 4.9 (Availability impact)...

CVE-2021-2278

CVE-2021-2278 affects Oracle MySQL Server, component Server: Optimizer. Affected: MySQL 8.0.23 and prior. An attacker with high privileges and network access via multiple protocols can trigger a hang or crash of MySQL Server (complete DoS). Documents corroborate impact as a denial of service with...

CVE-2019-2993

CVE-2019-2993 is a vulnerability in Oracle MySQL’s MySQL Server, specifically the Server: C API component. Affected versions include MySQL 5.7.27 and earlier and 8.0.17 and earlier. The vulnerability is described as difficult to exploit but, if exploited by a low-privilege attacker with network a...

CVE-2020-14799

CVE-2020-14799 is a vulnerability in the Oracle MySQL Server product (component: Server: Security: Encryption) affecting versions 8.0.20 and earlier. The issue allows a high-privileged attacker who has network access via multiple protocols to cause a hang or crash of MySQL Server, resulting in a ...

CVE-2020-14848

CVE-2020-14848 affects MySQL Server (Oracle MySQL), specifically the InnoDB component. Affected products/versions: MySQL 8.0.21 and earlier. Description from connected docs: an authenticated attacker with network access via multiple protocols can exploit this to trigger a hang or a frequently rep...

CVE-2020-14839

CVE-2020-14839 affects Oracle MySQL Server (Server: Optimizer) with affected versions 8.0.21 and earlier. The vulnerability, described across multiple sources, enables a high-privilege attacker with network access to cause a hang or complete DoS (high availability impact) via unspecified attack v...

CVE-2020-2805

CVE-2020-2805 is an OpenJDK/OpenJDK Libraries issue. The connected Chainguard entry states the flaw resides in the readObject() method of the MethodType class within the Libraries component of OpenJDK, which can allow an untrusted Java applet or application to bypass Java sandbox restrictions. Th...

CVE-2020-2895

CVE-2020-2895 affects Oracle MySQL Server, InnoDB component. Affected: MySQL 8.0.19 and earlier. Vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or crash (DoS) of MySQL Server. CVSS 3.0 base score 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)...

CVE-2020-2925

CVE-2020-2925 affects Oracle MySQL Server, component Server: PS, with affected versions 8.0.19 and earlier. The connected sources confirm a high-privilege, network-accessible attacker could cause a hang or frequent crash (DoS) of MySQL Server. No exploit details are provided in the documents. A r...

CVE-2021-2201

CVE-2021-2201 affects Oracle MySQL Server (Server: Partition) and is described across multiple sources as affecting MySQL 8.0.23 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS) in MySQL Server, with CVSS 3.1...

CVE-2022-21589

CVE-2022-21589 affects Oracle MySQL Server (Server: Security: Privileges). Affected versions are 5.7.39 and earlier, and 8.0.16 and earlier. The vulnerability allows a low-privileged, network-accessible attacker to read a subset of MySQL Server data. The description does not provide a patch/versi...

CVE-2019-2536

CVE-2019-2536 affects the MySQL Server subcomponent “Server: Packaging” in Oracle MySQL. Affected versions are 8.0.13 and earlier. The vulnerability is described as difficult to exploit and requires a user with high privileges and user interaction, with the potential to cause a hang or a complete...

CVE-2020-14656

CVE-2020-14656 is a MySQL (Oracle MySQL) vulnerability in the Server: Locking component affecting 8.0.20 and earlier. The issue allows a high-privileged attacker with network access via multiple protocols to cause a hang or crash (complete DOS) of MySQL Server. The available connected advisories ...

CVE-2020-14782

CVE-2020-14782 affects Oracle/OpenJDK Java SE/SE Embedded libraries (notably the Certificates processing) with affected versions including Java 7u271, 8u261, 11.0.8, 15 and Java SE Embedded 8u261. Connected advisory data confirms multiple vendors package updates across OpenJDK variants (e.g., ALA...

CVE-2020-14786

CVE-2020-14786 affects Oracle MySQL Server (Server: PS) with affected versions 8.0.21 and earlier. A high-privilege attacker with network access via multiple protocols can cause a hang or frequent crashes (DoS). Some public advisories indicate a fix exists in newer MySQL releases (e.g., upgrades ...

CVE-2021-2212

CVE-2021-2212 affects Oracle MySQL Server (Server: Optimizer) up to and including 8.0.23. The vulnerability exists in the optimizer component and, per sources, is exploitable by a high-privilege attacker who can reach the server over the network via multiple protocols, with the stated impact of a...

CVE-2019-2533

CVE-2019-2533 affects Oracle MySQL Server (Server: Privileges) with affected versions up to 8.0.13. The vulnerability allows a low-privileged, networked attacker to compromise MySQL Server, potentially leading to unauthorized creation, deletion or modification of data or access to all data on the...

CVE-2019-3009

CVE-2019-3009 affects Oracle MySQL Server (Server: Connection). Affected versions are 8.0.17 and earlier. The root cause, as described in the public entry and corroborated by linked advisories, is a condition that enables a high-privilege attacker who can access the server over multiple protocols...

CVE-2020-14845

CVE-2020-14845 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.21 and earlier. The vulnerability enables a network-authenticated, high-privileged attacker to cause a denial of service (hang or crash) in MySQL Server via multiple protocols. Impact: availability disruption; CVS...

CVE-2020-14868

CVE-2020-14868 affects Oracle MySQL Server (Server: Optimizer) and is associated with MySQL 8.0.21 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to trigger a hang or frequent crash (Denial of Service) in MySQL Server. The connected mat...

CVE-2020-14651

CVE-2020-14651 affects MySQL Server (Oracle MySQL), component Server: Security: Roles. Affected versions are 8.0.20 and earlier. An attacker with high privileges who can access the server over the network via multiple protocols can cause a hang or crash (DOS) and may gain unauthorized update/inse...

CVE-2020-14680

CVE-2020-14680 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected are MySQL Server versions 8.0.20 and earlier . The vulnerability is exploitable remotely via multiple protocols by a low-privilege attacker , resulting in a possible hang or crash (DENIAL OF SERVICE...

CVE-2020-14846

CVE-2020-14846 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.21 and earlier. Described as an easily exploitable issue where a low-privilege attacker with network access via multiple protocols can cause the server to hang or crash (DoS). CVSS v3.1 base score 6.5 (...

CVE-2020-2694

CVE-2020-2694 affects MySQL Server (Oracle MySQL), specifically the Server: Information Schema. Affected versions are 8.0.18 and earlier. The vulnerability can be exploited by a low-privilege, network-accessing attacker via multiple protocols to read a subset of MySQL Server data. The CVSS 3.0/3....

CVE-2020-2770

CVE-2020-2770 affects Oracle MySQL’s Server: Logging component. Affected: MySQL 8.0.18 and earlier. An attacker with network access via multiple protocols can cause a hang or frequent crash (DoS). No fix version/details provided in the supplied documents; no exploitation details are disclosed.

CVE-2020-2779

The CVE concerns Oracle MySQL Server: Privileges in MySQL Server 8.0.18 and earlier. An attacker with network access (via multiple protocols) could exploit this to cause a hang or frequent crashes (complete DoS). CVSS v3.0 base score is 4.9 (availability impact). Remediation noted in connected ma...

CVE-2021-36222

CVE-2021-36222 affects MIT Kerberos 5 (krb5) KDC: the ec_verify path in kdc/kdc_preauth_ec.c can trigger a NULL pointer dereference and daemon crash. The issue occurs in KDC processing for PA-ENCRYPTED-CHALLENGE data when not correctly handling a return value in certain situations, leading to a d...

CVE-2020-14791

CVE-2020-14791 affects Oracle MySQL Server (InnoDB) with versions 8.0.21 and earlier. The vulnerability is exploitable over network via multiple protocols to high-privilege attackers and can cause partial denial of service on MySQL Server. Public documentation confirms the flaw and associated imp...

CVE-2021-35586

CVE-2021-35586 is a vulnerability in Oracle Java SE (Java SE component: ImageIO) and Oracle GraalVM Enterprise Edition (affected versions: Java SE 7u311, 8u301, 11.0.12, 17; GraalVM EE: 20.3.3, 21.2.0) that enables an unauthenticated attacker with network access via multiple protocols to cause a ...

CVE-2022-21325

CVE-2022-21325 affects Oracle MySQL Cluster (Cluster: General) with affected versions up to 7.6.20, 7.4.34, 7.5.24 and up to 8.0.27. The issue is described as a buffer overflow in MySQL Cluster that can allow an attacker with access to the hardware’s physical communication segment to read data fr...

CVE-2024-21145

CVE-2024-21145 affects Oracle Java SE and Oracle GraalVM suites (component: 2D). Affected: Java SE versions 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; GraalVM for JDK versions 17.0.11, 21.0.3, 22.0.1; GraalVM Enterprise Edition 20.3.14 and 21.3.10. The description states a difficult‑to‑...

CVE-2019-2436

CVE-2019-2436 affects Oracle MySQL Server (subcomponent: Server: Replication). Affected: MySQL 8.0.13 and prior. Impact: high-privilege attacker with network access via multiple protocols can cause a hang or complete denial of service, and can also update/insert/delete some data. Remediation: upg...

CVE-2019-2997

CVE-2019-2997 concerns the MySQL Server (Oracle MySQL), specifically the Server: DDL component. The affected versions are 8.0.17 and prior. The description states that a high-privilege attacker who can access the server over multiple network protocols can exploit this vulnerability to cause the M...

CVE-2020-14861

CVE-2020-14861 affects Oracle MySQL Server (Server: Optimizer) in versions 8.0.21 and earlier. The vulnerability allows a highly privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server, per the description. The i...

CVE-2021-2300

CVE-2021-2300 affects Oracle MySQL Server (Server: DML) with affected versions 8.0.23 and earlier. The vulnerability could allow a high-privilege attacker, with network access via multiple protocols, to cause a hang or crash (complete DoS) of MySQL Server. The impact is availability loss as descr...

CVE-2020-14793

CVE-2020-14793 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 5.6.49 and earlier, 5.7.31 and earlier, 8.0.21 and earlier. Exploitation requires network access, potentially via multiple protocols, with high privileges to cause a hang or crash (DoS). Connected advisories confirm m...

CVE-2021-35564

CVE-2021-35564 affects Java SE (Keytool) and Oracle GraalVM Enterprise Edition, with affected Java SE versions 7u311, 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0. The vulnerability is exploitable remotely with unauthenticated network access and can lead to unauthorized updates/insertions/dele...

CVE-2022-21291

CVE-2022-21291 affects Oracle Java SE (Hotspot) and Oracle GraalVM Enterprise Edition. Affected versions include Oracle Java SE 7u321, 8u311, 11.0.13, 17.0.1 and GraalVM EE 20.3.4/21.3.0. It is exploitable over network via multiple protocols and can lead to unauthorized updates/deletes of data or...