Databases stack vulnerabilities · Page 14

CVE-2026-22015

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

• Update to 8.0.46-0ubuntu0.20.04.1+esm2
• Update to 8.0.46-0ubuntu0.22.04.2
• Update to 8.0.46-0ubuntu0.24.04.2
• Update to 8.4.9-0ubuntu0.25.10.1
• Update to 8.4.9-0ubuntu0.26.04.1

CVE-2026-22009

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

• Update to 8.0.46-0ubuntu0.20.04.1+esm2
• Update to 8.0.46-0ubuntu0.22.04.2
• Update to 8.0.46-0ubuntu0.24.04.2
• Update to 8.4.9-0ubuntu0.25.10.1
• Update to 8.4.9-0ubuntu0.26.04.1

CVE-2026-22005

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Update to 8.0.46-0ubuntu0.20.04.1+esm2
• Update to 8.0.46-0ubuntu0.22.04.2
• Update to 8.0.46-0ubuntu0.24.04.2
• Update to 8.4.9-0ubuntu0.25.10.1
• Update to 8.4.9-0ubuntu0.26.04.1

CVE-2026-22004

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Update to 8.0.46-0ubuntu0.20.04.1+esm2
• Update to 8.0.46-0ubuntu0.22.04.2
• Update to 8.0.46-0ubuntu0.24.04.2
• Update to 8.4.9-0ubuntu0.25.10.1
• Update to 8.4.9-0ubuntu0.26.04.1

CVE-2026-22002

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Update to 8.0.46-0ubuntu0.20.04.1+esm2
• Update to 8.0.46-0ubuntu0.22.04.2
• Update to 8.0.46-0ubuntu0.24.04.2
• Update to 8.4.9-0ubuntu0.25.10.1
• Update to 8.4.9-0ubuntu0.26.04.1

CVE-2026-22001

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

• Update to 8.0.46-0ubuntu0.20.04.1+esm2
• Update to 8.0.46-0ubuntu0.22.04.2
• Update to 8.0.46-0ubuntu0.24.04.2
• Update to 8.4.9-0ubuntu0.25.10.1
• Update to 8.4.9-0ubuntu0.26.04.1

CVE-2026-21998

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Update to 8.0.46-0ubuntu0.20.04.1+esm2
• Update to 8.0.46-0ubuntu0.22.04.2
• Update to 8.0.46-0ubuntu0.24.04.2
• Update to 8.4.9-0ubuntu0.25.10.1
• Update to 8.4.9-0ubuntu0.26.04.1

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.

• Update to 11.4.10
• Update to 11.8.6
• Update to 12.2.2
• Update to 1:11.8.6-0+deb13u1
• Update to 1:11.8.6-1

Valkey has Pre-Authentication DOS from malformed RESP request

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking state after processing an empty request. A malicious actor can then send a request that the server incorrectly identifies as breaking server side invariants, which results in the server shutting down. Version 9.0.3 fixes the issue. As an additional mitigation, properly isolate Valkey deployments so that only trusted users have access.

Malformed Valkey Cluster bus message can lead to Remote DoS

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port can send an invalid packet that may cause an out bound read, which might result in the system crashing. The Valkey clusterbus packet processing code does not validate that a clusterbus ping extension packet is located within buffer of the clusterbus packet before attempting to read it. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue. As an additional mitigation, don't expose the cluster bus connection directly to end users, and protect the connection with its own network ACLs.

• Update to 5:7.0.15-1~deb12u7
• Update to 5:8.0.2-3+deb13u2
• Update to 5:8.0.6-1
• Update to 7.2.12+dfsg1-0ubuntu0.1
• Update to 7.3.6+ds-2
• Update to 8.1.1+dfsg1-3+deb13u2
• Update to 8.1.4+dfsg1-2
• Update to 8.1.6+dfsg1-0ubuntu0.1

Valkey Affected by RESP Protocol Injection via Lua error_reply

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same connection. The error handling code for lua scripts does not properly handle null characters. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue.

• Update to 5:7.0.15-1~deb12u7
• Update to 5:8.0.2-3+deb13u2
• Update to 5:8.0.6-1
• Update to 7.2.12+dfsg1-0ubuntu0.1
• Update to 7.3.6+ds-2
• Update to 8.1.1+dfsg1-3+deb13u2
• Update to 8.1.4+dfsg1-2
• Update to 8.1.6+dfsg1-0ubuntu0.1

PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory

Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation. PostgreSQL 18.1 and 18.0 are affected.

• Update to 18.2
• Update to 18.2-1

PostgreSQL missing validation of multibyte character length executes arbitrary code

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

• Update to 14.21
• Update to 14.22-0ubuntu0.22.04.1
• Update to 15.16
• Update to 15.16-0+deb12u1
• Update to 16.12
• Update to 16.13-0ubuntu0.24.04.1
• Update to 17.8
• Update to 17.8-0+deb13u1
• Update to 17.9-0ubuntu0.25.10.1
• Update to 18.2
• Update to 18.2-1

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

• Update to 14.21
• Update to 14.22-0ubuntu0.22.04.1
• Update to 15.16
• Update to 15.16-0+deb12u1
• Update to 16.12
• Update to 16.13-0ubuntu0.24.04.1
• Update to 17.8
• Update to 17.8-0+deb13u1
• Update to 17.9-0ubuntu0.25.10.1
• Update to 18.2
• Update to 18.2-1

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

• Update to 14.21
• Update to 14.22-0ubuntu0.22.04.1
• Update to 15.16
• Update to 15.16-0+deb12u1
• Update to 16.12
• Update to 16.13-0ubuntu0.24.04.1
• Update to 17.8
• Update to 17.8-0+deb13u1
• Update to 17.9-0ubuntu0.25.10.1
• Update to 18.2
• Update to 18.2-1

PostgreSQL oidvector discloses a few bytes of memory

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

• Update to 14.21
• Update to 14.22-0ubuntu0.22.04.1
• Update to 15.16
• Update to 15.16-0+deb12u1
• Update to 16.12
• Update to 16.13-0ubuntu0.24.04.1
• Update to 17.8
• Update to 17.8-0+deb13u1
• Update to 17.9-0ubuntu0.25.10.1
• Update to 18.2
• Update to 18.2-1

CVE-2026-21968

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

• Update to 11.8.6-0+deb13u1
• Update to 1:10.11.18-0+deb12u1
• Update to 1:11.8.5-1
• Update to 8.0.45-0ubuntu0.20.04.1+esm2
• Update to 8.0.45-0ubuntu0.22.04.1

CVE-2026-21965

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

CVE-2026-21964

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Update to 8.0.45-0ubuntu0.20.04.1+esm2
• Update to 8.0.45-0ubuntu0.22.04.1
• Update to 8.0.45-0ubuntu0.24.04.1
• Update to 8.4.8-0ubuntu0.25.10.1
• Update to 8.4.8-0ubuntu1

CVE-2026-21952

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).