p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de la pile Bases de données · Page n° 52

Vulnérabilités publiées pour Bases de données au cours des 30 derniers jours : 82. Présentes dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Bases de données

Vulnérabilités : 1414

  1. CVE-2020-2893

    Moyenne · CVSS 4.9EPSS 2,43%Correctif disponible

    CVE-2020-2893

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. CVE-2020-2892

    Moyenne · CVSS 4.9EPSS 2,06%Correctif disponible

    CVE-2020-2892

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. CVE-2020-2853

    Moyenne · CVSS 4.9EPSS 2,36%Correctif disponible

    CVE-2020-2853

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.19-0ubuntu4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  4. CVE-2020-2814

    Moyenne · CVSS 4.9EPSS 2,8%Correctif disponible

    CVE-2020-2814

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.47 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 mariadb-10.0 percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.1 mysql-5.7 mariadb-10.3 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 1:10.1.47-0ubuntu0.18.04.1
    • Mettez à jour vers 1:10.3.25-0ubuntu0.20.04.1
    • Mettez à jour vers 5.7.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.29-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.19-0ubuntu4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. CVE-2020-2812

    Moyenne · CVSS 4.9EPSS 3,01%Correctif disponible

    CVE-2020-2812

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 mariadb-10.0 percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.1 mysql-5.7 mariadb-10.3 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 1:10.1.47-0ubuntu0.18.04.1
    • Mettez à jour vers 1:10.3.25-0ubuntu0.20.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. CVE-2020-2806

    Moyenne · CVSS 5.3EPSS 1,64%Correctif disponible

    CVE-2020-2806

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). Supported versions that are affected are 5.7.28 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.29-0ubuntu0.18.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  7. CVE-2020-2804

    Moyenne · CVSS 5.9EPSS 3,39%Correctif disponible

    CVE-2020-2804

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.30-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  8. CVE-2020-2790

    Moyenne · CVSS 6.5EPSS 1,86%Correctif disponible

    CVE-2020-2790

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 5.7.28 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.29-0ubuntu0.18.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. CVE-2020-2780

    Moyenne · CVSS 6.5EPSS 2,45%Correctif disponible

    CVE-2020-2780

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 mariadb-10.0 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.1 mysql-8.0 mariadb-10.3Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.30-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  10. CVE-2020-2779

    Moyenne · CVSS 4.9EPSS 2,39%Correctif disponible

    CVE-2020-2779

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.19-0ubuntu4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  11. CVE-2020-2774

    Moyenne · CVSS 4.9EPSS 2,39%Correctif disponible

    CVE-2020-2774

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.19-0ubuntu4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  12. CVE-2020-2770

    Moyenne · CVSS 4.9EPSS 2,03%Correctif disponible

    CVE-2020-2770

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.19-0ubuntu4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  13. CVE-2020-2765

    Moyenne · CVSS 4.9EPSS 2,51%Correctif disponible

    CVE-2020-2765

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.30-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  14. CVE-2020-2763

    Moyenne · CVSS 4.9EPSS 2,14%Correctif disponible

    CVE-2020-2763

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.30-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  15. CVE-2020-2762

    Moyenne · CVSS 4.9EPSS 2,52%Correctif disponible

    CVE-2020-2762

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  16. CVE-2020-2761

    Moyenne · CVSS 4.9EPSS 2%Correctif disponible

    CVE-2020-2761

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.19-0ubuntu4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  17. CVE-2020-2760

    Moyenne · CVSS 5.5EPSS 3,01%Correctif disponible

    CVE-2020-2760

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N

    mysql mysql-5.5 mysql-5.7 mariadb-10.0 percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.1 mysql-5.7 mariadb-10.3 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 1:10.1.47-0ubuntu0.18.04.1
    • Mettez à jour vers 1:10.3.25-0ubuntu0.20.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  18. CVE-2020-2759

    Moyenne · CVSS 4.9EPSS 2,14%Correctif disponible

    CVE-2020-2759

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 percona-server-5.6 percona-xtradb-cluster-5.6 mysql-8.0Systèmes d’exploitation Bases de données
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  19. CVE-2020-2752

    Moyenne · CVSS 5.3EPSS 2,34%Correctif disponible

    CVE-2020-2752

    Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

    mysql mysql-5.5 mariadb-10.0 percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.1 mariadb-10.3Systèmes d’exploitation Bases de données
    • Mettez à jour vers 1:10.1.47-0ubuntu0.18.04.1
    • Mettez à jour vers 1:10.3.25-0ubuntu0.20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  20. CVE-2020-1720

    Faible · CVSS 3.1EPSS 1,18%Correctif disponible

    CVE-2020-1720

    A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.

    postgresql postgresql-10Systèmes d’exploitation Bases de données
    • Mettez à jour vers 10.12-0ubuntu0.18.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →