Red Hat Security Advisory

RHSA-2022:6590

mysql security, bug fix, and enhancement update

Released 2022-09-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) mysql-devel-8.0.30-3.el9_0, mysql-libs-8.0.30-3.el9_0, mysql-test-8.0.30-3.el9_0
Red Hat Enterprise Linux AppStream (v. 9) mysql-8.0.30-3.el9_0, mysql-common-8.0.30-3.el9_0, mysql-errmsg-8.0.30-3.el9_0 +1

Fixes 52 records

TI-2022-06014 CVE-2022-21635 · GHSA-946h-v793-qmf6

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 32

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01338 Published 2022-10-18 Fixed

TI-2022-05949 CVE-2022-21569 · GHSA-3fxf-54jh-r696

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01406 Published 2022-07-19 Fixed

TI-2022-05936 CVE-2022-21556 · GHSA-w7mf-c4fv-c7rx

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01379 Published 2022-07-19 Fixed

TI-2022-05839 CVE-2022-21454 · GHSA-j2j5-jvjm-7m7c

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group…

LOW 32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01369 Published 2022-04-19 Fixed

TI-2022-05927 CVE-2022-21547 · GHSA-7cvj-v6q3-24p7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated).

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01364 Published 2022-07-19 Fixed

TI-2022-05842 CVE-2022-21457 · GHSA-3464-g4qq-f63p

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth…

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02092 Published 2022-04-19 Fixed

TI-2022-05908 CVE-2022-21528 · GHSA-327f-j778-q7ff

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 28

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01577 Published 2022-07-19 Fixed

TI-2022-05907 CVE-2022-21527 · GHSA-xfx5-j9h7-r9mh

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 28

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01651 Published 2022-07-19 Fixed

TI-2022-05889 CVE-2022-21509 · GHSA-m7v3-39g2-j969

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 28

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01651 Published 2022-07-19 Fixed

TI-2022-05864 CVE-2022-21479 · GHSA-rm24-r627-m4hc

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 28

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01554 Published 2022-04-19 Fixed

TI-2023-08250 CVE-2023-21872 · GHSA-c7c2-45vx-h8p9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00968 Published 2023-01-17 Fixed

TI-2022-05863 CVE-2022-21478 · GHSA-gp5v-g9c8-qq9r

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01257 Published 2022-04-19 Fixed

TI-2022-05844 CVE-2022-21459 · GHSA-9hv6-wmqm-882c

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01086 Published 2022-04-19 Fixed

TI-2022-05825 CVE-2022-21440 · GHSA-p53j-vqc7-ff2x

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01086 Published 2022-04-19 Fixed

TI-2022-05811 CVE-2022-21425 · GHSA-fw7p-ccmc-4xxh

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01257 Published 2022-04-19 Fixed

TI-2022-05917 CVE-2022-21537 · GHSA-5gxj-96mq-f5j3

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01841 Published 2022-07-19 Fixed

TI-2022-05914 CVE-2022-21534 · GHSA-5p3g-q4cc-8g3c

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored…

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01683 Published 2022-07-19 Fixed

TI-2022-05911 CVE-2022-21531 · GHSA-97g4-5j24-g25h

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01721 Published 2022-07-19 Fixed

TI-2022-05910 CVE-2022-21530 · GHSA-99j3-5j23-25jq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01769 Published 2022-07-19 Fixed

TI-2022-05909 CVE-2022-21529 · GHSA-x3ph-vm9w-xx64

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01683 Published 2022-07-19 Fixed

TI-2022-05906 CVE-2022-21526 · GHSA-qc6q-9w9r-6mp9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01852 Published 2022-07-19 Fixed

TI-2022-05905 CVE-2022-21525 · GHSA-r5gh-pv85-fwrr

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01841 Published 2022-07-19 Fixed

TI-2022-05897 CVE-2022-21517 · GHSA-cmcm-vjrq-h4j5

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01841 Published 2022-07-19 Fixed

TI-2022-05895 CVE-2022-21515 · GHSA-77f3-g5r5-qhp6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01841 Published 2022-07-19 Fixed

TI-2022-05813 CVE-2022-21427 · GHSA-544m-4mpc-wj67

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01996 Published 2022-04-19 Partial fix

TI-2023-08244 CVE-2023-21866 · GHSA-r2hq-gv77-cq97

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01077 Published 2023-01-17 Fixed

TI-2022-06020 CVE-2022-21641 · GHSA-83fr-4hw7-v3c5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01254 Published 2022-10-18 Fixed

TI-2022-06017 CVE-2022-21638 · GHSA-45fc-vgfv-j42h

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01254 Published 2022-10-18 Fixed

TI-2022-05986 CVE-2022-21607 · GHSA-3gx9-7v2h-vcxw

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.012 Published 2022-10-18 Fixed

TI-2022-05984 CVE-2022-21605 · GHSA-73w8-4h43-h886

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01324 Published 2022-10-18 Fixed

TI-2022-05933 CVE-2022-21553 · GHSA-jf3g-fgc3-89ff

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01275 Published 2022-07-19 Fixed

TI-2022-05919 CVE-2022-21539 · GHSA-p2xr-6f29-ph2q

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00971 Published 2022-07-19 Fixed

TI-2022-05847 CVE-2022-21462 · GHSA-hq88-rq39-mwhv

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01252 Published 2022-04-19 Fixed

TI-2022-05840 CVE-2022-21455 · GHSA-8ghh-fvqm-877g

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01057 Published 2022-07-19 Fixed

TI-2022-05837 CVE-2022-21452 · GHSA-6p59-cxfw-x75r

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01252 Published 2022-04-19 Fixed

TI-2022-05823 CVE-2022-21438 · GHSA-wph3-x2w9-2c92

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01252 Published 2022-04-19 Fixed

TI-2022-05822 CVE-2022-21437 · GHSA-f6pj-xmq3-95f6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01303 Published 2022-04-19 Fixed

TI-2022-05821 CVE-2022-21436 · GHSA-9h37-q36f-jq35

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01252 Published 2022-04-19 Fixed

TI-2022-05820 CVE-2022-21435 · GHSA-c545-vqjc-fwv2

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01303 Published 2022-04-19 Fixed

TI-2022-05804 CVE-2022-21418 · GHSA-rjfv-5xmq-8rm7

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 5.0 Network High privileges No interaction EPSS 0.01096 Published 2022-04-19 Partial fix

TI-2022-05803 CVE-2022-21417 · GHSA-27p8-77q9-fwpp

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01456 Published 2022-04-19 Partial fix

TI-2022-05801 CVE-2022-21415 · GHSA-pg75-8xj9-4hp7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01383 Published 2022-04-19 Fixed

TI-2022-05800 CVE-2022-21414 · GHSA-825r-8gpj-489x

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01366 Published 2022-04-19 Fixed

TI-2022-05799 CVE-2022-21413 · GHSA-pgcw-gwc5-jw93

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01421 Published 2022-04-19 Fixed

TI-2022-05798 CVE-2022-21412 · GHSA-fr7p-c7mr-68jq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01456 Published 2022-04-19 Fixed

TI-2022-05902 CVE-2022-21522 · GHSA-qpw6-vmfc-p2jv

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored…

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01678 Published 2022-07-19 Fixed

TI-2022-05845 CVE-2022-21460 · GHSA-pfph-h89w-f59p

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging).

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01322 Published 2022-04-19 Fixed

TI-2022-05836 CVE-2022-21451 · GHSA-3crw-xq5c-jr37

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01232 Published 2022-04-19 Partial fix

TI-2022-05829 CVE-2022-21444 · GHSA-g5x5-8m9h-cpvx

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01266 Published 2022-04-19 Fixed

TI-2022-05971 CVE-2022-21592 · GHSA-87c6-f68m-3j78

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00813 Published 2022-10-18 Fixed

TI-2022-05918 CVE-2022-21538 · GHSA-f7jf-c7w2-p7w2

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 17

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00792 Published 2022-07-19 Fixed

TI-2022-05809 CVE-2022-21423 · GHSA-fhf7-c2rx-fj43

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 16

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.01279 Published 2022-04-19 Partial fix