p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de la pila Bases de datos · Página 71

Vulnerabilidades publicadas para Bases de datos en los últimos 30 días: 82. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Bases de datos

Vulnerabilidades: 1414

  1. CVE-2017-3265

    Media · CVSS 5.6EPSS 1,36%Corrección disponible

    CVE-2017-3265

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatabl

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 10.0.29-0ubuntu0.16.04.1
    • Actualiza a 5.5.54-0ubuntu0.14.04.1
    • Actualiza a 5.5.54-1ubuntu0.14.04.1
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2017-3258

    Media · CVSS 6.5EPSS 3,1%Corrección disponible

    CVE-2017-3258

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 10.0.29-0ubuntu0.16.04.1
    • Actualiza a 5.5.54-0ubuntu0.14.04.1
    • Actualiza a 5.5.54-1ubuntu0.14.04.1
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2017-3257

    Media · CVSS 6.5EPSS 2,57%Corrección disponible

    CVE-2017-3257

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 10.0.29-0ubuntu0.16.04.1
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  4. CVE-2017-3256

    Media · CVSS 6.5EPSS 2,35%Corrección disponible

    CVE-2017-3256

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  5. CVE-2017-3251

    Media · CVSS 4.9EPSS 1,75%Corrección disponible

    CVE-2017-3251

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.9 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  6. CVE-2017-3244

    Media · CVSS 6.5EPSS 3,71%Corrección disponible

    CVE-2017-3244

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 10.0.29-0ubuntu0.16.04.1
    • Actualiza a 5.5.54-0ubuntu0.14.04.1
    • Actualiza a 5.5.54-1ubuntu0.14.04.1
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  7. CVE-2017-3243

    Media · CVSS 4.4EPSS 4,34%Corrección disponible

    CVE-2017-3243

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 10.0.29-0ubuntu0.16.04.1
    • Actualiza a 5.5.54-0ubuntu0.14.04.1
    • Actualiza a 5.5.54-1ubuntu0.14.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  8. CVE-2017-3238

    Media · CVSS 6.5EPSS 4,79%Corrección disponible

    CVE-2017-3238

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 10.0.29-0ubuntu0.16.04.1
    • Actualiza a 5.5.54-0ubuntu0.14.04.1
    • Actualiza a 5.5.54-1ubuntu0.14.04.1
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  9. CVE-2016-8327

    Media · CVSS 4.4EPSS 2,43%Corrección disponible

    CVE-2016-8327

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  10. CVE-2016-8318

    Media · CVSS 6.8EPSS 1,35%Corrección disponible

    CVE-2016-8318

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Sistemas operativos Bases de datos
    • Actualiza a 5.7.17-0ubuntu0.16.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  11. CVE-2016-8706

    Alta · CVSS 8.1EPSS 45,7%Código de explotación públicoCorrección disponible

    CVE-2016-8706

    An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedSistemas operativos Bases de datos
    • Actualiza a 1.4.14-0ubuntu9.1
    • Actualiza a 1.4.25-2ubuntu1.2
    • Actualiza a 1.4.33-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  12. CVE-2016-8705

    Crítica · CVSS 9.8EPSS 19,85%Corrección disponible

    CVE-2016-8705

    Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedSistemas operativos Bases de datos
    • Actualiza a 1.4.14-0ubuntu9.1
    • Actualiza a 1.4.25-2ubuntu1.2
    • Actualiza a 1.4.33-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  13. CVE-2016-8704

    Crítica · CVSS 9.8EPSS 23,17%Corrección disponible

    CVE-2016-8704

    An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedSistemas operativos Bases de datos
    • Actualiza a 1.4.14-0ubuntu9.1
    • Actualiza a 1.4.25-2ubuntu1.2
    • Actualiza a 1.4.33-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  14. CVE-2016-8339

    Media · CVSS 6.6EPSS 14,83%Corrección disponible

    CVE-2016-8339

    A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

    redis redis redis redisSistemas operativos Bases de datos
    • Actualiza a 3:3.2.4-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →