p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de la pile Bases de données · Page n° 71

Vulnérabilités publiées pour Bases de données au cours des 30 derniers jours : 82. Présentes dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Bases de données

Vulnérabilités : 1414

  1. CVE-2017-3265

    Moyenne · CVSS 5.6EPSS 1,36%Correctif disponible

    CVE-2017-3265

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatabl

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 10.0.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.5.54-0ubuntu0.14.04.1
    • Mettez à jour vers 5.5.54-1ubuntu0.14.04.1
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. CVE-2017-3258

    Moyenne · CVSS 6.5EPSS 3,1%Correctif disponible

    CVE-2017-3258

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 10.0.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.5.54-0ubuntu0.14.04.1
    • Mettez à jour vers 5.5.54-1ubuntu0.14.04.1
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. CVE-2017-3257

    Moyenne · CVSS 6.5EPSS 2,57%Correctif disponible

    CVE-2017-3257

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 10.0.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  4. CVE-2017-3256

    Moyenne · CVSS 6.5EPSS 2,35%Correctif disponible

    CVE-2017-3256

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. CVE-2017-3251

    Moyenne · CVSS 4.9EPSS 1,75%Correctif disponible

    CVE-2017-3251

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.9 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. CVE-2017-3244

    Moyenne · CVSS 6.5EPSS 3,71%Correctif disponible

    CVE-2017-3244

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 10.0.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.5.54-0ubuntu0.14.04.1
    • Mettez à jour vers 5.5.54-1ubuntu0.14.04.1
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  7. CVE-2017-3243

    Moyenne · CVSS 4.4EPSS 4,34%Correctif disponible

    CVE-2017-3243

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 10.0.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.5.54-0ubuntu0.14.04.1
    • Mettez à jour vers 5.5.54-1ubuntu0.14.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  8. CVE-2017-3238

    Moyenne · CVSS 6.5EPSS 4,79%Correctif disponible

    CVE-2017-3238

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 10.0.29-0ubuntu0.16.04.1
    • Mettez à jour vers 5.5.54-0ubuntu0.14.04.1
    • Mettez à jour vers 5.5.54-1ubuntu0.14.04.1
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. CVE-2016-8327

    Moyenne · CVSS 4.4EPSS 2,43%Correctif disponible

    CVE-2016-8327

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  10. CVE-2016-8318

    Moyenne · CVSS 6.8EPSS 1,35%Correctif disponible

    CVE-2016-8318

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Systèmes d’exploitation Bases de données
    • Mettez à jour vers 5.7.17-0ubuntu0.16.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  11. CVE-2016-8706

    Élevée · CVSS 8.1EPSS 45,7%Code d’exploitation publicCorrectif disponible

    CVE-2016-8706

    An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedSystèmes d’exploitation Bases de données
    • Mettez à jour vers 1.4.14-0ubuntu9.1
    • Mettez à jour vers 1.4.25-2ubuntu1.2
    • Mettez à jour vers 1.4.33-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  12. CVE-2016-8705

    Critique · CVSS 9.8EPSS 19,85%Correctif disponible

    CVE-2016-8705

    Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedSystèmes d’exploitation Bases de données
    • Mettez à jour vers 1.4.14-0ubuntu9.1
    • Mettez à jour vers 1.4.25-2ubuntu1.2
    • Mettez à jour vers 1.4.33-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  13. CVE-2016-8704

    Critique · CVSS 9.8EPSS 23,17%Correctif disponible

    CVE-2016-8704

    An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedSystèmes d’exploitation Bases de données
    • Mettez à jour vers 1.4.14-0ubuntu9.1
    • Mettez à jour vers 1.4.25-2ubuntu1.2
    • Mettez à jour vers 1.4.33-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  14. CVE-2016-8339

    Moyenne · CVSS 6.6EPSS 14,83%Correctif disponible

    CVE-2016-8339

    A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

    redis redis redis redisSystèmes d’exploitation Bases de données
    • Mettez à jour vers 3:3.2.4-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →