p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de la pile Bases de données · Page n° 15

Vulnérabilités publiées pour Bases de données au cours des 30 derniers jours : 81. Présentes dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Bases de données

Vulnérabilités : 1413

  1. CVE-2026-21950

    Moyenne · CVSS 6.5EPSS 0,38%Aucun correctif publié

    CVE-2026-21950

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.3Systèmes d’exploitation Bases de données
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  2. CVE-2026-21949

    Moyenne · CVSS 6.5EPSS 0,38%Aucun correctif publié

    CVE-2026-21949

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.3Systèmes d’exploitation Bases de données
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  3. CVE-2026-21948

    Moyenne · CVSS 4.9EPSS 0,4%Correctif disponible

    CVE-2026-21948

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.0.45-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.24.04.1
    • Mettez à jour vers 8.4.8-0ubuntu0.25.10.1
    • Mettez à jour vers 8.4.8-0ubuntu1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  4. CVE-2026-21941

    Moyenne · CVSS 4.9EPSS 0,4%Correctif disponible

    CVE-2026-21941

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.0.45-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.24.04.1
    • Mettez à jour vers 8.4.8-0ubuntu0.25.10.1
    • Mettez à jour vers 8.4.8-0ubuntu1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  5. CVE-2026-21937

    Moyenne · CVSS 4.9EPSS 0,4%Correctif disponible

    CVE-2026-21937

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.0.45-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.24.04.1
    • Mettez à jour vers 8.4.8-0ubuntu0.25.10.1
    • Mettez à jour vers 8.4.8-0ubuntu1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  6. CVE-2026-21936

    Moyenne · CVSS 4.9EPSS 0,4%Correctif disponible

    CVE-2026-21936

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql cluster mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.0.45-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.24.04.1
    • Mettez à jour vers 8.4.8-0ubuntu0.25.10.1
    • Mettez à jour vers 8.4.8-0ubuntu1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  7. CVE-2026-21929

    Moyenne · CVSS 5.3EPSS 0,32%Aucun correctif publié

    CVE-2026-21929

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 9.0.0-9.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.3Systèmes d’exploitation Bases de données
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  8. CVE-2025-13699

    Élevée · CVSS 7EPSS 0,52%Correctif disponible

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.

    mariadb mariadb mariadb mariadb mariadb-10.0 mariadb-10.1 mariadb-10.3 mariadb-10.6 mariadb mariadbSystèmes d’exploitation Bases de données
    • Mettez à jour vers 11.8.6-0+deb13u1
    • Mettez à jour vers 1:10.11.18-0+deb12u1
    • Mettez à jour vers 1:11.8.5-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. CVE-2025-12818

    Moyenne · CVSS 5.9EPSS 0,36%Correctif disponible

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

    postgresql postgresql-15 postgresql-17 postgresql-18 postgresql-9.3 postgresql-9.5 postgresql-10 postgresql-12 postgresql-14 postgresql-16 postgresql-17 postgresql-18Systèmes d’exploitation Bases de données
    • Mettez à jour vers 13.23
    • Mettez à jour vers 14.20
    • Mettez à jour vers 14.20-0ubuntu0.22.04.1
    • Mettez à jour vers 15.15
    • Mettez à jour vers 15.15-0+deb12u1
    • Mettez à jour vers 16.11
    • Mettez à jour vers 16.11-0ubuntu0.24.04.1
    • Mettez à jour vers 17.7
    • Mettez à jour vers 17.7-0+deb13u1
    • Mettez à jour vers 17.7-0ubuntu0.25.10.1
    • Mettez à jour vers 18.1
    • Mettez à jour vers 18.1-1
    • Mettez à jour vers 18.1-1ubuntu1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  10. CVE-2025-12817

    Faible · CVSS 3.1EPSS 0,24%Correctif disponible

    PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

    Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

    postgresql postgresql-15 postgresql-17 postgresql-18 postgresql-9.3 postgresql-9.5 postgresql-10 postgresql-12 postgresql-14 postgresql-16 postgresql-17 postgresql-18Systèmes d’exploitation Bases de données
    • Mettez à jour vers 13.23
    • Mettez à jour vers 14.20
    • Mettez à jour vers 14.20-0ubuntu0.22.04.1
    • Mettez à jour vers 15.15
    • Mettez à jour vers 15.15-0+deb12u1
    • Mettez à jour vers 16.11
    • Mettez à jour vers 16.11-0ubuntu0.24.04.1
    • Mettez à jour vers 17.7
    • Mettez à jour vers 17.7-0+deb13u1
    • Mettez à jour vers 17.7-0ubuntu0.25.10.1
    • Mettez à jour vers 18.1
    • Mettez à jour vers 18.1-1
    • Mettez à jour vers 18.1-1ubuntu1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  11. CVE-2025-62507

    Élevée · CVSS 7.7EPSS 7,47%Aucun correctif publié

    Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

    Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this issue without patching the redis-server executable is to prevent users from executing XACKDEL operation. This can be done using ACL to restrict XACKDEL command.

    redisBases de données
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  12. CVE-2025-53069

    Moyenne · CVSS 4.9EPSS 0,58%Correctif disponible

    CVE-2025-53069

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.44-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.44-0ubuntu0.24.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.4.7-0ubuntu0.25.10.2
    • Mettez à jour vers 8.4.7-0ubuntu2
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  13. CVE-2025-53067

    Moyenne · CVSS 4.9EPSS 0,58%Aucun correctif publié

    CVE-2025-53067

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.3Systèmes d’exploitation Bases de données
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  14. CVE-2025-53062

    Moyenne · CVSS 4.9EPSS 0,58%Correctif disponible

    CVE-2025-53062

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.44-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.44-0ubuntu0.24.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.4.7-0ubuntu0.25.10.2
    • Mettez à jour vers 8.4.7-0ubuntu2
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  15. CVE-2025-53054

    Moyenne · CVSS 5.5EPSS 0,48%Correctif disponible

    CVE-2025-53054

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.44-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.44-0ubuntu0.24.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.4.7-0ubuntu0.25.10.2
    • Mettez à jour vers 8.4.7-0ubuntu2
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  16. CVE-2025-53053

    Moyenne · CVSS 5.5EPSS 0,48%Correctif disponible

    CVE-2025-53053

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.44-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.44-0ubuntu0.24.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.4.7-0ubuntu0.25.10.2
    • Mettez à jour vers 8.4.7-0ubuntu2
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  17. CVE-2025-53045

    Moyenne · CVSS 4.9EPSS 0,58%Correctif disponible

    CVE-2025-53045

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.44-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.44-0ubuntu0.24.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.4.7-0ubuntu0.25.10.2
    • Mettez à jour vers 8.4.7-0ubuntu2
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  18. CVE-2025-53044

    Moyenne · CVSS 4.9EPSS 0,58%Correctif disponible

    CVE-2025-53044

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.44-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.44-0ubuntu0.24.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.4.7-0ubuntu0.25.10.2
    • Mettez à jour vers 8.4.7-0ubuntu2
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  19. CVE-2025-53042

    Moyenne · CVSS 4.9EPSS 0,58%Correctif disponible

    CVE-2025-53042

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.44-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.44-0ubuntu0.24.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.4.7-0ubuntu0.25.10.2
    • Mettez à jour vers 8.4.7-0ubuntu2
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  20. CVE-2025-53040

    Moyenne · CVSS 4.9EPSS 0,58%Correctif disponible

    CVE-2025-53040

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0 mariadb-10.3 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.44-0ubuntu0.22.04.1
    • Mettez à jour vers 8.0.44-0ubuntu0.24.04.1
    • Mettez à jour vers 8.0.45-0ubuntu0.20.04.1+esm2
    • Mettez à jour vers 8.4.7-0ubuntu0.25.10.2
    • Mettez à jour vers 8.4.7-0ubuntu2
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →