p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in mysql-8.0 · Seite 27

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für mysql-8.0: 0. Davon im KEV-Katalog: 0.

Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 626

  1. CVE-2020-14725

    Mittel · CVSS 4.9EPSS 1,76%Korrektur verfügbar

    CVE-2020-14725

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  2. CVE-2020-14702

    Mittel · CVSS 4.9EPSS 2,01%Korrektur verfügbar

    CVE-2020-14702

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  3. CVE-2020-14697

    Hoch · CVSS 7.2EPSS 2,04%Korrektur verfügbar

    CVE-2020-14697

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  4. CVE-2020-14680

    Mittel · CVSS 6.5EPSS 2,09%Korrektur verfügbar

    CVE-2020-14680

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  5. CVE-2020-14678

    Hoch · CVSS 7.2EPSS 2,04%Korrektur verfügbar

    CVE-2020-14678

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  6. CVE-2020-14663

    Hoch · CVSS 7.2EPSS 2,12%Korrektur verfügbar

    CVE-2020-14663

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  7. CVE-2020-14656

    Mittel · CVSS 4.9EPSS 1,93%Korrektur verfügbar

    CVE-2020-14656

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  8. CVE-2020-14654

    Mittel · CVSS 4.9EPSS 2,28%Korrektur verfügbar

    CVE-2020-14654

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  9. CVE-2020-14651

    Mittel · CVSS 5.5EPSS 2,02%Korrektur verfügbar

    CVE-2020-14651

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  10. CVE-2020-14643

    Mittel · CVSS 5.5EPSS 2,15%Korrektur verfügbar

    CVE-2020-14643

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  11. CVE-2020-14641

    Mittel · CVSS 4.9EPSS 1,98%Korrektur verfügbar

    CVE-2020-14641

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  12. CVE-2020-14634

    Niedrig · CVSS 2.7EPSS 1,78%Korrektur verfügbar

    CVE-2020-14634

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  13. CVE-2020-14633

    Niedrig · CVSS 2.7EPSS 1,42%Korrektur verfügbar

    CVE-2020-14633

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  14. CVE-2020-14632

    Mittel · CVSS 4.9EPSS 2,23%Korrektur verfügbar

    CVE-2020-14632

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  15. CVE-2020-14631

    Mittel · CVSS 4.9EPSS 2,28%Korrektur verfügbar

    CVE-2020-14631

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  16. CVE-2020-14624

    Mittel · CVSS 4.9EPSS 2,14%Korrektur verfügbar

    CVE-2020-14624

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  17. CVE-2020-14623

    Mittel · CVSS 4.9EPSS 2,01%Korrektur verfügbar

    CVE-2020-14623

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  18. CVE-2020-14620

    Mittel · CVSS 4.9EPSS 2,28%Korrektur verfügbar

    CVE-2020-14620

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  19. CVE-2020-14619

    Mittel · CVSS 6.5EPSS 2,69%Korrektur verfügbar

    CVE-2020-14619

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert
  20. CVE-2020-14597

    Mittel · CVSS 4.9EPSS 2,07%Korrektur verfügbar

    CVE-2020-14597

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Auf 8.0.21-0ubuntu0.20.04.3 aktualisieren
    Veröffentlicht Aktualisiert

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →