p PatchFirst

PatchFirst · Latest vulnerabilities

Databases stack vulnerabilities · Page 71

Vulnerabilities published for Databases in the last 30 days: 82. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Databases

Vulnerabilities: 1414

  1. CVE-2017-3265

    Medium · CVSS 5.6EPSS 1.36%Fix available

    CVE-2017-3265

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatabl

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 10.0.29-0ubuntu0.16.04.1
    • Update to 5.5.54-0ubuntu0.14.04.1
    • Update to 5.5.54-1ubuntu0.14.04.1
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2017-3258

    Medium · CVSS 6.5EPSS 3.1%Fix available

    CVE-2017-3258

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 10.0.29-0ubuntu0.16.04.1
    • Update to 5.5.54-0ubuntu0.14.04.1
    • Update to 5.5.54-1ubuntu0.14.04.1
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2017-3257

    Medium · CVSS 6.5EPSS 2.57%Fix available

    CVE-2017-3257

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 10.0.29-0ubuntu0.16.04.1
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2017-3256

    Medium · CVSS 6.5EPSS 2.35%Fix available

    CVE-2017-3256

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2017-3251

    Medium · CVSS 4.9EPSS 1.75%Fix available

    CVE-2017-3251

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.9 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2017-3244

    Medium · CVSS 6.5EPSS 3.71%Fix available

    CVE-2017-3244

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 10.0.29-0ubuntu0.16.04.1
    • Update to 5.5.54-0ubuntu0.14.04.1
    • Update to 5.5.54-1ubuntu0.14.04.1
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2017-3243

    Medium · CVSS 4.4EPSS 4.34%Fix available

    CVE-2017-3243

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 10.0.29-0ubuntu0.16.04.1
    • Update to 5.5.54-0ubuntu0.14.04.1
    • Update to 5.5.54-1ubuntu0.14.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2017-3238

    Medium · CVSS 6.5EPSS 4.79%Fix available

    CVE-2017-3238

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

    mysql mariadb-5.5 mysql-5.5 mariadb-10.0 mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 10.0.29-0ubuntu0.16.04.1
    • Update to 5.5.54-0ubuntu0.14.04.1
    • Update to 5.5.54-1ubuntu0.14.04.1
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2016-8327

    Medium · CVSS 4.4EPSS 2.43%Fix available

    CVE-2016-8327

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2016-8318

    Medium · CVSS 6.8EPSS 1.35%Fix available

    CVE-2016-8318

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of

    mysql mysql-5.7 percona-server-5.6 percona-xtradb-cluster-5.6Operating systems Databases
    • Update to 5.7.17-0ubuntu0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2016-8706

    High · CVSS 8.1EPSS 45.7%Public exploitFix available

    CVE-2016-8706

    An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedOperating systems Databases
    • Update to 1.4.14-0ubuntu9.1
    • Update to 1.4.25-2ubuntu1.2
    • Update to 1.4.33-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2016-8705

    Critical · CVSS 9.8EPSS 19.85%Fix available

    CVE-2016-8705

    Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedOperating systems Databases
    • Update to 1.4.14-0ubuntu9.1
    • Update to 1.4.25-2ubuntu1.2
    • Update to 1.4.33-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2016-8704

    Critical · CVSS 9.8EPSS 23.17%Fix available

    CVE-2016-8704

    An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

    memcached memcached memcached memcached memcached memcachedOperating systems Databases
    • Update to 1.4.14-0ubuntu9.1
    • Update to 1.4.25-2ubuntu1.2
    • Update to 1.4.33-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2016-8339

    Medium · CVSS 6.6EPSS 14.83%Fix available

    CVE-2016-8339

    A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

    redis redis redis redisOperating systems Databases
    • Update to 3:3.2.4-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →