p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Schwachstellen im Stack Datenbanken · Seite 39

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für Datenbanken: 82. Davon im KEV-Katalog: 0.

Sicherheitslücken filtern
Datenbanken

Sicherheitslücken: 1414

  1. CVE-2021-35630

    Mittel · CVSS 4.9EPSS 1,46%Korrektur verfügbar

    CVE-2021-35630

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  2. CVE-2021-35629

    Mittel · CVSS 4.9EPSS 1,71%Korrektur verfügbar

    CVE-2021-35629

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.26-0ubuntu0.20.04.2 aktualisieren
    • Auf 8.0.26-0ubuntu1 aktualisieren
    Veröffentlicht Aktualisiert
  3. CVE-2021-35628

    Mittel · CVSS 4.9EPSS 1,94%Korrektur verfügbar

    CVE-2021-35628

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  4. CVE-2021-35627

    Mittel · CVSS 4.9EPSS 1,83%Korrektur verfügbar

    CVE-2021-35627

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  5. CVE-2021-35626

    Mittel · CVSS 4.9EPSS 1,79%Korrektur verfügbar

    CVE-2021-35626

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  6. CVE-2021-35625

    Niedrig · CVSS 2.7EPSS 1,58%Korrektur verfügbar

    CVE-2021-35625

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  7. CVE-2021-35624

    Mittel · CVSS 4.9EPSS 1,43%Korrektur verfügbar

    CVE-2021-35624

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).

    • Auf 5.7.36-0ubuntu0.16.04.1+esm1 aktualisieren
    • Auf 5.7.36-0ubuntu0.18.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  8. CVE-2021-35623

    Niedrig · CVSS 2.7EPSS 1,58%Korrektur verfügbar

    CVE-2021-35623

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  9. CVE-2021-35622

    Mittel · CVSS 4.9EPSS 1,27%Korrektur verfügbar

    CVE-2021-35622

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  10. CVE-2021-35612

    Mittel · CVSS 5.5EPSS 1,65%Korrektur verfügbar

    CVE-2021-35612

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  11. CVE-2021-35610

    Hoch · CVSS 7.1EPSS 2,29%Korrektur verfügbar

    CVE-2021-35610

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  12. CVE-2021-35608

    Mittel · CVSS 5.3EPSS 2,2%Korrektur verfügbar

    CVE-2021-35608

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  13. CVE-2021-35607

    Mittel · CVSS 6.5EPSS 2,44%Korrektur verfügbar

    CVE-2021-35607

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  14. CVE-2021-35604

    Mittel · CVSS 5.5EPSS 2,66%Korrektur verfügbar

    CVE-2021-35604

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N

    • Auf 1:10.3.32-0ubuntu0.20.04.1 aktualisieren
    • Auf 1:10.5.15-0+deb11u1 aktualisieren
    • Auf 5.7.36-0ubuntu0.16.04.1+esm1 aktualisieren
    • Auf 5.7.36-0ubuntu0.18.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  15. CVE-2021-35602

    Mittel · CVSS 5EPSS 1,94%Korrektur verfügbar

    CVE-2021-35602

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  16. CVE-2021-35597

    Mittel · CVSS 6.5EPSS 2,59%Korrektur verfügbar

    CVE-2021-35597

    Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  17. CVE-2021-35596

    Mittel · CVSS 4.9EPSS 2,5%Korrektur verfügbar

    CVE-2021-35596

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Error Handling). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  18. CVE-2021-35591

    Mittel · CVSS 4.9EPSS 2,51%Korrektur verfügbar

    CVE-2021-35591

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert
  19. CVE-2021-35583

    Hoch · CVSS 7.5EPSS 3,07%Korrektur verfügbar

    CVE-2021-35583

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Windows). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.26-0ubuntu0.20.04.2 aktualisieren
    • Auf 8.0.26-0ubuntu1 aktualisieren
    Veröffentlicht Aktualisiert
  20. CVE-2021-35577

    Mittel · CVSS 4.9EPSS 2,5%Korrektur verfügbar

    CVE-2021-35577

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via MySQL Protcol to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    • Auf 8.0.27-0ubuntu0.21.10.1 aktualisieren
    Veröffentlicht Aktualisiert

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →