p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de la pila Bases de datos · Página 15

Vulnerabilidades publicadas para Bases de datos en los últimos 30 días: 81. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Bases de datos

Vulnerabilidades: 1413

  1. CVE-2026-21950

    Media · CVSS 6.5EPSS 0,38%Sin corrección publicada

    CVE-2026-21950

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.3Sistemas operativos Bases de datos
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  2. CVE-2026-21949

    Media · CVSS 6.5EPSS 0,38%Sin corrección publicada

    CVE-2026-21949

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.3Sistemas operativos Bases de datos
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  3. CVE-2026-21948

    Media · CVSS 4.9EPSS 0,4%Corrección disponible

    CVE-2026-21948

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.0.45-0ubuntu0.22.04.1
    • Actualiza a 8.0.45-0ubuntu0.24.04.1
    • Actualiza a 8.4.8-0ubuntu0.25.10.1
    • Actualiza a 8.4.8-0ubuntu1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  4. CVE-2026-21941

    Media · CVSS 4.9EPSS 0,4%Corrección disponible

    CVE-2026-21941

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.0.45-0ubuntu0.22.04.1
    • Actualiza a 8.0.45-0ubuntu0.24.04.1
    • Actualiza a 8.4.8-0ubuntu0.25.10.1
    • Actualiza a 8.4.8-0ubuntu1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  5. CVE-2026-21937

    Media · CVSS 4.9EPSS 0,4%Corrección disponible

    CVE-2026-21937

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.0.45-0ubuntu0.22.04.1
    • Actualiza a 8.0.45-0ubuntu0.24.04.1
    • Actualiza a 8.4.8-0ubuntu0.25.10.1
    • Actualiza a 8.4.8-0ubuntu1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  6. CVE-2026-21936

    Media · CVSS 4.9EPSS 0,4%Corrección disponible

    CVE-2026-21936

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql cluster mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.0.45-0ubuntu0.22.04.1
    • Actualiza a 8.0.45-0ubuntu0.24.04.1
    • Actualiza a 8.4.8-0ubuntu0.25.10.1
    • Actualiza a 8.4.8-0ubuntu1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  7. CVE-2026-21929

    Media · CVSS 5.3EPSS 0,32%Sin corrección publicada

    CVE-2026-21929

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 9.0.0-9.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.3Sistemas operativos Bases de datos
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  8. CVE-2025-13699

    Alta · CVSS 7EPSS 0,52%Corrección disponible

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.

    mariadb mariadb mariadb mariadb mariadb-10.0 mariadb-10.1 mariadb-10.3 mariadb-10.6 mariadb mariadbSistemas operativos Bases de datos
    • Actualiza a 11.8.6-0+deb13u1
    • Actualiza a 1:10.11.18-0+deb12u1
    • Actualiza a 1:11.8.5-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  9. CVE-2025-12818

    Media · CVSS 5.9EPSS 0,36%Corrección disponible

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

    postgresql postgresql-15 postgresql-17 postgresql-18 postgresql-9.3 postgresql-9.5 postgresql-10 postgresql-12 postgresql-14 postgresql-16 postgresql-17 postgresql-18Sistemas operativos Bases de datos
    • Actualiza a 13.23
    • Actualiza a 14.20
    • Actualiza a 14.20-0ubuntu0.22.04.1
    • Actualiza a 15.15
    • Actualiza a 15.15-0+deb12u1
    • Actualiza a 16.11
    • Actualiza a 16.11-0ubuntu0.24.04.1
    • Actualiza a 17.7
    • Actualiza a 17.7-0+deb13u1
    • Actualiza a 17.7-0ubuntu0.25.10.1
    • Actualiza a 18.1
    • Actualiza a 18.1-1
    • Actualiza a 18.1-1ubuntu1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  10. CVE-2025-12817

    Baja · CVSS 3.1EPSS 0,24%Corrección disponible

    PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

    Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

    postgresql postgresql-15 postgresql-17 postgresql-18 postgresql-9.3 postgresql-9.5 postgresql-10 postgresql-12 postgresql-14 postgresql-16 postgresql-17 postgresql-18Sistemas operativos Bases de datos
    • Actualiza a 13.23
    • Actualiza a 14.20
    • Actualiza a 14.20-0ubuntu0.22.04.1
    • Actualiza a 15.15
    • Actualiza a 15.15-0+deb12u1
    • Actualiza a 16.11
    • Actualiza a 16.11-0ubuntu0.24.04.1
    • Actualiza a 17.7
    • Actualiza a 17.7-0+deb13u1
    • Actualiza a 17.7-0ubuntu0.25.10.1
    • Actualiza a 18.1
    • Actualiza a 18.1-1
    • Actualiza a 18.1-1ubuntu1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  11. CVE-2025-62507

    Alta · CVSS 7.7EPSS 7,47%Sin corrección publicada

    Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

    Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this issue without patching the redis-server executable is to prevent users from executing XACKDEL operation. This can be done using ACL to restrict XACKDEL command.

    redisBases de datos
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  12. CVE-2025-53069

    Media · CVSS 4.9EPSS 0,58%Corrección disponible

    CVE-2025-53069

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.44-0ubuntu0.22.04.1
    • Actualiza a 8.0.44-0ubuntu0.24.04.1
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.4.7-0ubuntu0.25.10.2
    • Actualiza a 8.4.7-0ubuntu2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  13. CVE-2025-53067

    Media · CVSS 4.9EPSS 0,58%Sin corrección publicada

    CVE-2025-53067

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.3Sistemas operativos Bases de datos
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  14. CVE-2025-53062

    Media · CVSS 4.9EPSS 0,58%Corrección disponible

    CVE-2025-53062

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.44-0ubuntu0.22.04.1
    • Actualiza a 8.0.44-0ubuntu0.24.04.1
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.4.7-0ubuntu0.25.10.2
    • Actualiza a 8.4.7-0ubuntu2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  15. CVE-2025-53054

    Media · CVSS 5.5EPSS 0,48%Corrección disponible

    CVE-2025-53054

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.44-0ubuntu0.22.04.1
    • Actualiza a 8.0.44-0ubuntu0.24.04.1
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.4.7-0ubuntu0.25.10.2
    • Actualiza a 8.4.7-0ubuntu2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  16. CVE-2025-53053

    Media · CVSS 5.5EPSS 0,48%Corrección disponible

    CVE-2025-53053

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.44-0ubuntu0.22.04.1
    • Actualiza a 8.0.44-0ubuntu0.24.04.1
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.4.7-0ubuntu0.25.10.2
    • Actualiza a 8.4.7-0ubuntu2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  17. CVE-2025-53045

    Media · CVSS 4.9EPSS 0,58%Corrección disponible

    CVE-2025-53045

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.44-0ubuntu0.22.04.1
    • Actualiza a 8.0.44-0ubuntu0.24.04.1
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.4.7-0ubuntu0.25.10.2
    • Actualiza a 8.4.7-0ubuntu2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  18. CVE-2025-53044

    Media · CVSS 4.9EPSS 0,58%Corrección disponible

    CVE-2025-53044

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.44-0ubuntu0.22.04.1
    • Actualiza a 8.0.44-0ubuntu0.24.04.1
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.4.7-0ubuntu0.25.10.2
    • Actualiza a 8.4.7-0ubuntu2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  19. CVE-2025-53042

    Media · CVSS 4.9EPSS 0,58%Corrección disponible

    CVE-2025-53042

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.44-0ubuntu0.22.04.1
    • Actualiza a 8.0.44-0ubuntu0.24.04.1
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.4.7-0ubuntu0.25.10.2
    • Actualiza a 8.4.7-0ubuntu2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  20. CVE-2025-53040

    Media · CVSS 4.9EPSS 0,58%Corrección disponible

    CVE-2025-53040

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Sistemas operativos Bases de datos
    • Actualiza a 8.0.44-0ubuntu0.22.04.1
    • Actualiza a 8.0.44-0ubuntu0.24.04.1
    • Actualiza a 8.0.45-0ubuntu0.20.04.1+esm2
    • Actualiza a 8.4.7-0ubuntu0.25.10.2
    • Actualiza a 8.4.7-0ubuntu2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →