p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in mysql-8.0 · Seite 15

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für mysql-8.0: 0. Davon im KEV-Katalog: 0.

Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 626

  1. CVE-2022-21423

    Niedrig · CVSS 2.7EPSS 1,28%Korrektur verfügbar

    CVE-2022-21423

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

    • Auf 8.0.29-0ubuntu0.20.04.2 aktualisieren
    Veröffentlicht Aktualisiert
  2. CVE-2022-21418

    Mittel · CVSS 5EPSS 1,1%Korrektur verfügbar

    CVE-2022-21418

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).

    • Auf 8.0.29-0ubuntu0.20.04.2 aktualisieren
    Veröffentlicht Aktualisiert
  3. CVE-2022-21417

    Mittel · CVSS 4.9EPSS 1,46%Korrektur verfügbar

    CVE-2022-21417

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.29-0ubuntu0.20.04.2 aktualisieren
    Veröffentlicht Aktualisiert
  4. CVE-2022-21415

    Mittel · CVSS 4.9EPSS 1,38%Korrektur verfügbar

    CVE-2022-21415

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.29-0ubuntu0.20.04.2 aktualisieren
    Veröffentlicht Aktualisiert
  5. CVE-2022-21414

    Mittel · CVSS 4.9EPSS 1,37%Korrektur verfügbar

    CVE-2022-21414

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.29-0ubuntu0.20.04.2 aktualisieren
    Veröffentlicht Aktualisiert
  6. CVE-2022-21413

    Mittel · CVSS 4.9EPSS 1,42%Korrektur verfügbar

    CVE-2022-21413

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.29-0ubuntu0.20.04.2 aktualisieren
    Veröffentlicht Aktualisiert
  7. CVE-2022-21412

    Mittel · CVSS 4.9EPSS 1,46%Korrektur verfügbar

    CVE-2022-21412

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.29-0ubuntu0.20.04.2 aktualisieren
    Veröffentlicht Aktualisiert
  8. CVE-2022-21379

    Mittel · CVSS 4.9EPSS 1,27%Korrektur verfügbar

    CVE-2022-21379

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  9. CVE-2022-21378

    Mittel · CVSS 5.5EPSS 1,22%Korrektur verfügbar

    CVE-2022-21378

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  10. CVE-2022-21374

    Mittel · CVSS 4.9EPSS 1,34%Korrektur verfügbar

    CVE-2022-21374

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  11. CVE-2022-21372

    Niedrig · CVSS 2.7EPSS 0,88%Korrektur verfügbar

    CVE-2022-21372

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  12. CVE-2022-21370

    Mittel · CVSS 4.9EPSS 1,44%Korrektur verfügbar

    CVE-2022-21370

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  13. CVE-2022-21368

    Mittel · CVSS 4.7EPSS 1,15%Korrektur verfügbar

    CVE-2022-21368

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.7 (Confidentiality,

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  14. CVE-2022-21367

    Mittel · CVSS 5.5EPSS 1,31%Korrektur verfügbar

    CVE-2022-21367

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  15. CVE-2022-21362

    Mittel · CVSS 4.9EPSS 1,36%Korrektur verfügbar

    CVE-2022-21362

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  16. CVE-2022-21358

    Mittel · CVSS 6.5EPSS 1,01%Korrektur verfügbar

    CVE-2022-21358

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  17. CVE-2022-21352

    Mittel · CVSS 5.9EPSS 1,3%Korrektur verfügbar

    CVE-2022-21352

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:

    • Auf 8.0.27-0ubuntu0.20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
  18. CVE-2022-21351

    Hoch · CVSS 7.1EPSS 1,27%Korrektur verfügbar

    CVE-2022-21351

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  19. CVE-2022-21348

    Mittel · CVSS 4.9EPSS 1,36%Korrektur verfügbar

    CVE-2022-21348

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  20. CVE-2022-21344

    Mittel · CVSS 4.9EPSS 1,46%Korrektur verfügbar

    CVE-2022-21344

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.28-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →