Red Hat Security Advisory

RHSA-2023:3087

mysql:8.0 security, bug fix, and enhancement update

Released 2023-05-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) mecab-0.996-2.module+el8.8.0+18436+8918dd75.aarch64::mysql:8.0, mecab-0.996-2.module+el8.8.0+18436+8918dd75.ppc64le::mysql:8.0, mecab-0.996-2.module+el8.8.0+18436+8918dd75.s390x::mysql:8.0 +44

Fixes 42 records

TI-2023-08265 CVE-2023-21887 · GHSA-28xr-rgjv-2mgp

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS).

MEDIUM 51

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.43403 Published 2023-01-17 Fixed

TI-2023-08288 CVE-2023-21912 · GHSA-cw9v-qmqv-mp9c

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 35

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01165 Published 2023-04-18 Fixed

TI-2022-18782 CVE-2022-39410 · GHSA-cw5v-hvcg-5fxq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01528 Published 2022-10-18 Fixed

TI-2022-18780 CVE-2022-39408 · GHSA-fj59-pgc7-7mf2

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01528 Published 2022-10-18 Fixed

TI-2023-08246 CVE-2023-21868 · GHSA-5r8v-6m23-99mf

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00911 Published 2023-01-17 Fixed

TI-2023-08253 CVE-2023-21875 · GHSA-g4wm-6cvv-mf6f

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).

CVSS 3.1MEDIUM 5.9 Network High privileges No interaction EPSS 0.01524 Published 2023-01-17 Fixed

TI-2023-08258 CVE-2023-21880 · GHSA-ppj2-4gr4-fjhj

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00825 Published 2023-01-17 Fixed

TI-2023-08255 CVE-2023-21877 · GHSA-2f8v-jrxx-vxgr

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00825 Published 2023-01-17 Fixed

TI-2023-08247 CVE-2023-21869 · GHSA-56g4-23jq-wc6r

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00825 Published 2023-01-17 Fixed

TI-2022-05996 CVE-2022-21617 · GHSA-2gvq-92c2-xj2h

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection…

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01737 Published 2022-10-18 Fixed

TI-2022-05987 CVE-2022-21608 · GHSA-8c7h-vcff-vfxq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01737 Published 2022-10-18 Fixed

TI-2023-08399 CVE-2023-22028 · GHSA-cgr2-322v-vgjm

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01048 Published 2023-10-17 Fixed

TI-2023-08386 CVE-2023-22015 · GHSA-5v2h-8g8q-mwmw

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01048 Published 2023-10-17 Fixed

TI-2023-08292 CVE-2023-21917 · GHSA-c56j-6w4v-vfw3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01125 Published 2023-04-18 Fixed

TI-2023-08289 CVE-2023-21913 · GHSA-5j9v-hmm6-ffcm

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01125 Published 2023-04-18 Fixed

TI-2023-08243 CVE-2023-21865 · GHSA-c948-9xmv-jwrm

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01155 Published 2023-01-17 Fixed

TI-2023-08242 CVE-2023-21864 · GHSA-px9v-93xc-6jxp

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01155 Published 2023-01-17 Fixed

TI-2022-18772 CVE-2022-39400 · GHSA-qqc4-r6pr-hvwj

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01462 Published 2022-10-18 Fixed

TI-2022-06019 CVE-2022-21640 · GHSA-hxm2-wc54-rc7x

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01462 Published 2022-10-18 Fixed

TI-2022-06016 CVE-2022-21637 · GHSA-5vwr-9c6v-pxf7

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01462 Published 2022-10-18 Fixed

TI-2022-06012 CVE-2022-21633 · GHSA-6grf-r8pm-7j2p

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01483 Published 2022-10-18 Fixed

TI-2022-06011 CVE-2022-21632 · GHSA-wwx5-rp7h-xc6x

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01483 Published 2022-10-18 Fixed

TI-2022-05983 CVE-2022-21604 · GHSA-5m5q-gvxw-j824

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01483 Published 2022-10-18 Fixed

TI-2022-05978 CVE-2022-21599 · GHSA-7h2x-hwcf-f9q6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01483 Published 2022-10-18 Fixed

TI-2022-05973 CVE-2022-21594 · GHSA-rx5q-gxfx-g59w

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01483 Published 2022-10-18 Fixed

TI-2023-08397 CVE-2023-22026 · GHSA-ppg6-248w-w8px

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01034 Published 2023-10-17 Fixed

TI-2023-08261 CVE-2023-21883 · GHSA-xqpj-2g7h-482w

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08259 CVE-2023-21881 · GHSA-vqjc-g539-mgwq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08257 CVE-2023-21879 · GHSA-329x-vfj9-wrpq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08256 CVE-2023-21878 · GHSA-52mm-4rg6-p426

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08254 CVE-2023-21876 · GHSA-fvr4-38h4-c8jh

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08251 CVE-2023-21873 · GHSA-9hww-pc44-6fgh

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08249 CVE-2023-21871 · GHSA-q33m-wc33-hp5g

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08248 CVE-2023-21870 · GHSA-57m7-9qvc-6gvg

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08245 CVE-2023-21867 · GHSA-2757-2xv4-prm9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08241 CVE-2023-21863 · GHSA-8fwj-m6w5-76vp

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00884 Published 2023-01-17 Fixed

TI-2023-08214 CVE-2023-21836 · GHSA-8cm7-86gq-xv3r

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00795 Published 2023-01-17 Fixed

TI-2022-06004 CVE-2022-21625 · GHSA-75qr-7cf6-c5qr

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01351 Published 2022-10-18 Fixed

TI-2022-05990 CVE-2022-21611 · GHSA-2hj8-q57r-32v5

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 20

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00458 Published 2022-10-18 Fixed

TI-2023-08335 CVE-2023-21963 · GHSA-45q7-75rg-j96f

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection…

LOW 16

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00997 Published 2023-04-18 Fixed

TI-2023-08252 CVE-2023-21874 · GHSA-286q-p8mv-qhjh

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread…

LOW 16

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.01044 Published 2023-01-17 Fixed

TI-2023-08260 CVE-2023-21882 · GHSA-rjx7-h9vr-hc7g

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00661 Published 2023-01-17 Fixed