Red Hat Security Advisory

RHSA-2024:1141

mysql security update

Released 2024-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) mysql-devel-8.0.36-1.el9_3, mysql-libs-8.0.36-1.el9_3, mysql-test-8.0.36-1.el9_3
Red Hat Enterprise Linux AppStream (v. 9) mysql-8.0.36-1.el9_3, mysql-common-8.0.36-1.el9_3, mysql-errmsg-8.0.36-1.el9_3 +1

Fixes 87 records

TI-2022-04490 CVE-2022-4899 · GHSA-5c9c-6x87-f9vm

Uncontrolled resource consumption in zstd

MEDIUM 42

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01588 Published 2023-03-31 Partial fix · 1.5.4, 1.5.4.0 CWE-400

TI-2023-08352 CVE-2023-21980 · GHSA-3x7j-9p25-v8r6

Improper access control in Oracle MySQL Server

LOW 35

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs).

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00826 Published 2023-04-18 Fixed CWE-284

TI-2023-08321 CVE-2023-21946 · GHSA-2gmh-429f-mh43

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01501 Published 2023-04-18 Fixed

TI-2024-13778 CVE-2024-20985 · GHSA-w32c-gg4j-5fxv

Uncontrolled resource consumption in Oracle MySQL Server

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01104 Published 2024-01-16 Fixed CWE-400

TI-2024-13770 CVE-2024-20977 · GHSA-9vm4-r3mm-m2cq

Uncontrolled resource consumption in Oracle MySQL Server

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01057 Published 2024-01-16 Fixed CWE-400

TI-2024-13766 CVE-2024-20973 · GHSA-w45w-99c9-fqr4

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01057 Published 2024-01-16 Fixed

TI-2024-13756 CVE-2024-20963 · GHSA-2rq6-88fr-gr6r

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01104 Published 2024-01-16 Fixed

TI-2024-13755 CVE-2024-20962 · GHSA-h29x-5q67-v88m

Uncontrolled resource consumption in Oracle MySQL Server

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01117 Published 2024-02-17 Fixed CWE-400

TI-2024-13754 CVE-2024-20961 · GHSA-mj6p-jggh-hr8w

Uncontrolled resource consumption in Oracle MySQL Server

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01104 Published 2024-01-16 Fixed CWE-400

TI-2024-13753 CVE-2024-20960 · GHSA-xw86-99gp-4h78

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: RAPID).

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: RAPID).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01117 Published 2024-02-17 Fixed

TI-2023-08448 CVE-2023-22079 · GHSA-6pf2-f6hc-85m8

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01072 Published 2023-10-17 Fixed

TI-2023-08429 CVE-2023-22059 · GHSA-w499-gpr6-v77v

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01149 Published 2023-10-17 Fixed

TI-2023-08423 CVE-2023-22053 · GHSA-jx4c-v89f-3pc6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs).

LOW 29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs).

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.0133 Published 2023-07-18 Fixed

TI-2023-08453 CVE-2023-22084 · GHSA-65rf-4p7c-6rj9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02129 Published 2023-10-17 Partial fix

TI-2023-08304 CVE-2023-21929 · GHSA-wrfq-rpgg-v86h

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01283 Published 2023-04-18 Fixed

TI-2024-13762 CVE-2024-20969 · GHSA-xvjx-j3q9-j35p

Improper access control in Oracle MySQL Server

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00839 Published 2024-01-16 Fixed CWE-284

TI-2024-13760 CVE-2024-20967 · GHSA-5qv8-mq82-vgm3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server…

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00816 Published 2024-01-16 Fixed

TI-2024-13758 CVE-2024-20965 · GHSA-4j85-8vqx-f8qv

Uncontrolled resource consumption in Oracle MySQL NDB Cluster

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01539 Published 2024-01-16 Fixed CWE-400

TI-2024-13757 CVE-2024-20964 · GHSA-m8q6-hf5g-rg2m

Uncontrolled resource consumption in Oracle MySQL Server

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01023 Published 2024-02-17 Fixed CWE-400

TI-2023-08426 CVE-2023-22056 · GHSA-h3fp-97x3-hfh7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01824 Published 2023-07-18 Fixed

TI-2024-13785 CVE-2024-20993 · GHSA-6qf6-cmc3-h6x2

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01085 Published 2024-04-16 Fixed

TI-2024-13775 CVE-2024-20982 · GHSA-7xf9-6885-2xx3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01096 Published 2024-02-17 Fixed

TI-2024-13769 CVE-2024-20976 · GHSA-mcfm-j6mc-82gv

Uncontrolled resource consumption in Oracle MySQL Server

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01096 Published 2024-02-17 Fixed CWE-400

TI-2024-13765 CVE-2024-20972 · GHSA-h33h-98m4-q487

Uncontrolled resource consumption in Oracle MySQL Server

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01096 Published 2024-02-17 Fixed CWE-400

TI-2024-13763 CVE-2024-20970 · GHSA-9qgq-46r9-2xqc

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01096 Published 2024-02-17 Fixed

TI-2024-13759 CVE-2024-20966 · GHSA-v35r-73cx-8h67

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01096 Published 2024-02-17 Fixed CWE-404

TI-2023-08483 CVE-2023-22114 · GHSA-rxvf-574f-jxg9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01156 Published 2023-10-17 Fixed

TI-2023-08481 CVE-2023-22112 · GHSA-c7g6-45fc-f7vc

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01088 Published 2023-10-17 Fixed

TI-2023-08480 CVE-2023-22111 · GHSA-p5cg-cmr6-2cv9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01103 Published 2023-10-17 Fixed

TI-2023-08479 CVE-2023-22110 · GHSA-ccw5-93gh-4q98

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01088 Published 2023-10-17 Fixed

TI-2023-08473 CVE-2023-22104 · GHSA-j56f-8qj6-8hq6

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01088 Published 2023-10-17 Fixed

TI-2023-08472 CVE-2023-22103 · GHSA-gg5q-5hmp-6xjv

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01156 Published 2023-10-17 Fixed

TI-2023-08466 CVE-2023-22097 · GHSA-r7r4-3gwf-9jcv

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01088 Published 2023-10-17 Fixed

TI-2023-08461 CVE-2023-22092 · GHSA-fw5x-h992-pwfq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01088 Published 2023-10-17 Fixed

TI-2023-08447 CVE-2023-22078 · GHSA-grpq-fcc2-cq2h

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01105 Published 2023-10-17 Fixed

TI-2023-08437 CVE-2023-22068 · GHSA-m363-ppgq-j23v

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01105 Published 2023-10-17 Fixed

TI-2023-08435 CVE-2023-22066 · GHSA-r4gq-7562-4hj7

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01105 Published 2023-10-17 Fixed

TI-2023-08434 CVE-2023-22065 · GHSA-2h7v-x3pf-2wp3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0109 Published 2023-10-17 Fixed

TI-2023-08427 CVE-2023-22057 · GHSA-wwfw-f5wx-mqfq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01384 Published 2023-07-18 Fixed

TI-2023-08424 CVE-2023-22054 · GHSA-43p6-f687-hpg4

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01384 Published 2023-07-18 Fixed

TI-2023-08416 CVE-2023-22046 · GHSA-hf25-qmmr-hcwr

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01319 Published 2023-07-18 Fixed

TI-2023-08402 CVE-2023-22032 · GHSA-5cvv-cxch-6c5q

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01105 Published 2023-10-17 Fixed

TI-2023-08379 CVE-2023-22008 · GHSA-v5jr-x7g7-q28m

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01319 Published 2023-07-18 Fixed

TI-2023-08378 CVE-2023-22007 · GHSA-w8j7-vjcv-x246

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01067 Published 2023-07-18 Fixed

TI-2023-08354 CVE-2023-21982 · GHSA-mww6-2c47-6x6f

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01128 Published 2023-04-18 Fixed

TI-2023-08349 CVE-2023-21977 · GHSA-8cww-pr34-93r4

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01128 Published 2023-04-18 Fixed

TI-2023-08348 CVE-2023-21976 · GHSA-j9r2-788m-8qg3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01144 Published 2023-04-18 Fixed

TI-2023-08344 CVE-2023-21972 · GHSA-r89c-qmfv-gv8q

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01144 Published 2023-04-18 Fixed

TI-2023-08338 CVE-2023-21966 · GHSA-7j3f-wvvj-48p5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01125 Published 2023-04-18 Fixed

TI-2023-08334 CVE-2023-21962 · GHSA-cwjg-p28m-pjm5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01388 Published 2023-04-18 Fixed

TI-2023-08329 CVE-2023-21955 · GHSA-9vf7-w4v4-w7jp

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01388 Published 2023-04-18 Fixed

TI-2023-08327 CVE-2023-21953 · GHSA-5397-f9q9-jmhj

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01456 Published 2023-04-18 Fixed

TI-2023-08320 CVE-2023-21945 · GHSA-gcv6-8fjm-c933

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.014 Published 2023-04-18 Fixed

TI-2023-08310 CVE-2023-21935 · GHSA-rr2h-5xgg-773r

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01388 Published 2023-04-18 Fixed

TI-2023-08308 CVE-2023-21933 · GHSA-72r2-x2w6-j5c9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.014 Published 2023-04-18 Fixed

TI-2023-08295 CVE-2023-21920 · GHSA-c5c9-v5px-chmj

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01468 Published 2023-04-18 Fixed

TI-2023-08294 CVE-2023-21919 · GHSA-58j7-7pf2-r5r6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01456 Published 2023-04-18 Fixed

TI-2023-08287 CVE-2023-21911 · GHSA-6f3c-wg77-5r99

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01372 Published 2023-04-18 Fixed

TI-2024-13987 CVE-2024-21200 · GHSA-q5rv-w3vj-5jjx

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00888 Published 2024-10-15 Fixed

TI-2024-13928 CVE-2024-21137 · GHSA-gv82-rp99-r5wq

Improper authorization in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00836 Published 2024-07-16 Fixed CWE-285

TI-2024-13853 CVE-2024-21061 · GHSA-6pwq-2vrc-6rr6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit…

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00887 Published 2024-04-16 Fixed

TI-2024-13849 CVE-2024-21057 · GHSA-w7jr-2c2w-7vxj

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00969 Published 2024-04-16 Fixed CWE-400

TI-2024-13848 CVE-2024-21056 · GHSA-jmgx-64x4-v838

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00894 Published 2024-04-16 Fixed

TI-2024-13847 CVE-2024-21055 · GHSA-hcm7-xw9m-99cx

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00887 Published 2024-04-16 Fixed CWE-400

TI-2024-13845 CVE-2024-21053 · GHSA-7pmg-vmj4-qjp4

Stack-based buffer overflow in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00962 Published 2024-04-16 Fixed CWE-121

TI-2024-13844 CVE-2024-21052 · GHSA-3jpw-p5mr-c3q9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00924 Published 2024-04-16 Fixed CWE-404

TI-2024-13843 CVE-2024-21051 · GHSA-v98m-62r5-hvcm

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00994 Published 2024-04-16 Fixed CWE-400

TI-2024-13842 CVE-2024-21050 · GHSA-63p9-g7fv-6cvr

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00986 Published 2024-04-16 Fixed CWE-400

TI-2024-13841 CVE-2024-21049 · GHSA-8x4w-7h9g-pg2q

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00986 Published 2024-04-16 Fixed

TI-2024-13776 CVE-2024-20983 · GHSA-pvw6-vc2c-x7v5

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00926 Published 2024-01-16 Fixed CWE-400

TI-2024-13774 CVE-2024-20981 · GHSA-96gj-xmph-8xrx

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01038 Published 2024-01-16 Fixed CWE-400

TI-2024-13771 CVE-2024-20978 · GHSA-p6hw-8jfc-qq89

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01031 Published 2024-02-17 Fixed CWE-400

TI-2024-13767 CVE-2024-20974 · GHSA-9hvj-649j-6jh6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00881 Published 2024-02-17 Fixed

TI-2024-13764 CVE-2024-20971 · GHSA-pg84-6g27-3r3m

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01038 Published 2024-01-16 Fixed CWE-400

TI-2023-08484 CVE-2023-22115 · GHSA-fc29-v5hq-xxwc

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0104 Published 2023-10-17 Fixed

TI-2023-08439 CVE-2023-22070 · GHSA-ph7m-3pqq-4p7r

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01025 Published 2023-10-17 Fixed

TI-2023-08433 CVE-2023-22064 · GHSA-4g99-g84m-jr5m

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0104 Published 2023-10-17 Fixed

TI-2023-08428 CVE-2023-22058 · GHSA-rgvh-3cch-xp7q

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01699 Published 2023-07-18 Fixed

TI-2024-13777 CVE-2024-20984 · GHSA-v9qx-jfm7-6ggw

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security…

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security : Firewall).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01048 Published 2024-02-17 Fixed

TI-2023-08403 CVE-2023-22033 · GHSA-vh2h-3ph9-58xp

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01229 Published 2023-07-18 Fixed

TI-2023-08376 CVE-2023-22005 · GHSA-98v6-cgh3-5362

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server…

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01289 Published 2023-07-18 Fixed

TI-2023-08322 CVE-2023-21947 · GHSA-qf9q-3c8x-cw89

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components…

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01368 Published 2023-04-18 Fixed

TI-2023-08315 CVE-2023-21940 · GHSA-c793-h382-wj7w

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components…

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01294 Published 2023-04-18 Fixed

TI-2024-13761 CVE-2024-20968 · GHSA-jmjh-9cw7-275h

Resource allocation without limits in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00858 Published 2024-02-17 Fixed CWE-770

TI-2023-08418 CVE-2023-22048 · GHSA-86fx-xhf4-vrcp

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable…

LOW 17

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth).

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.01021 Published 2023-07-18 Fixed

TI-2023-08482 CVE-2023-22113 · GHSA-3vxq-839x-9f98

Out-of-bounds read in Oracle MySQL Server

LOW 16

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.0096 Published 2023-10-17 Fixed CWE-125

TI-2023-08408 CVE-2023-22038 · GHSA-c39q-q5mc-57gx

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00942 Published 2023-07-18 Fixed