Lucene search
Ubuntu.comUB:CVE-2023-21880HistoryJan 18, 2023 - 12:00 a.m.
CVE-2023-21880
2023-01-1800:00:00
ubuntu.com
ubuntu.com
12
0.001 Low
EPSS
Percentile
33.8%
Vulnerability in the MySQL Server product of Oracle MySQL (component:
InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily
exploitable vulnerability allows high privileged attacker with network
access via multiple protocols to compromise MySQL Server. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
hang or frequently repeatable crash (complete DOS) of MySQL Server as well
as unauthorized update, insert or delete access to some of MySQL Server
accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability
impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Notes
| Author | Note |
|---|---|
| leosilva | since 5.5 is no longer upstream supported and so far we cannot patch it, marking it as ignored. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 16.04 | noarch | mariadb-10.0 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mariadb-10.1 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mariadb-10.3 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mariadb-10.6 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mysql-8.0 | < 8.0.32-0buntu0.20.04.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | mysql-8.0 | < 8.0.32-0buntu0.22.04.1 | UNKNOWN |
| ubuntu | 22.10 | noarch | mysql-8.0 | < 8.0.32-0buntu0.22.10.1 | UNKNOWN |
| ubuntu | 23.04 | noarch | mysql-8.0 | < 8.0.32-0ubuntu2 | UNKNOWN |
| ubuntu | 23.10 | noarch | mysql-8.0 | < 8.0.32-0ubuntu2 | UNKNOWN |
| ubuntu | 24.04 | noarch | mysql-8.0 | < 8.0.32-0ubuntu2 | UNKNOWN |
Related
nessus
nessus
CBL Mariner 2.0 Security Update: mysql (CVE-2023-21880)
2023-03-20 00:00:00
Oracle MySQL Server (October 2023 CPU)
2023-01-18 00:00:00
cvelist
cvelist
CVE-2023-21880
2023-01-17 23:35:22
debiancve
debiancve
CVE-2023-21880
2023-01-18 00:15:16
cbl_mariner
cbl_mariner
CVE-2023-21880 affecting package mysql 8.0.31-1
2023-04-07 04:59:49
CVE-2023-21880 affecting package mysql for versions less than 8.0.32-1
2023-02-14 20:21:32
cve
cve
CVE-2023-21880
2023-01-18 00:15:16
osv
osv
CVE-2023-21880
2023-01-18 00:15:16
mysql-5.7, mysql-8.0 vulnerabilities
2023-01-24 18:20:27
Important: mysql:8.0 security, bug fix, and enhancement update
2023-05-16 00:00:00
prion
prion
Code injection
2023-01-18 00:15:00
redhatcve
redhatcve
CVE-2023-21880
2023-01-19 10:05:01
openvas
openvas
Oracle MySQL Server 8.x <= 8.0.31 Security Update (cpujan2023) - Linux
2023-01-19 00:00:00
Oracle MySQL Server 8.x <= 8.0.31 Security Update (cpujan2023) - Windows
2023-01-19 00:00:00
Ubuntu: Security Advisory (USN-5823-1)
2023-01-25 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-3.0-0523
2023-02-01 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0325
2023-02-01 00:00:00
cloudfoundry
cloudfoundry
USN-5823-1: MySQL vulnerabilities | Cloud Foundry
2023-02-03 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2023-01-24 00:00:00
ibm
ibm
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2023-01-20 00:00:00
oraclelinux
oraclelinux
mysql:8.0 security, bug fix, and enhancement update
2023-05-25 00:00:00
mysql security update
2023-05-17 00:00:00
almalinux
almalinux
Important: mysql security update
2023-05-09 00:00:00
Important: mysql:8.0 security, bug fix, and enhancement update
2023-05-16 00:00:00
redhat
redhat
(RHSA-2023:1102) Moderate: rh-mysql80-mysql security update
2023-03-07 09:07:36
(RHSA-2023:2621) Important: mysql security update
2023-05-09 10:13:57
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00