Vulnerability-Lookup

RHSA-2024:0894

Vulnerability from csaf_redhat - Published: 2024-02-20 12:40 - Updated: 2026-06-28 09:16

Summary

Red Hat Security Advisory: mysql:8.0 security update

Severity

Moderate

Notes

Topic: An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911) * mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933) * mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982) * mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962) * mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953, CVE-2023-21955) * mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966) * mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972) * mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980) * mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057) * mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112) * mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033) * mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046, CVE-2023-22054, CVE-2023-22056) * mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053) * mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058) * mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114) * mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111) * mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115) * mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964) * mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967) * mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968) * mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-20970, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982) * mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981) * mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983) * mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984) * mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985) * zstd: mysql: buffer overrun in util.c (CVE-2022-4899) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038) * mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (RHEL-22452)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-4899

A vulnerability was found in zstd. This flaw allows an attacker to supply an empty string as an argument to the command line tool to cause a buffer overrun.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 79 products

Product	Version	Remediation
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-0:0.996-2.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-0:0.996-2.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-0:0.996-2.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-0:0.996-2.module+el8.9.0+21207+6c20cb3d.src::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-0:0.996-2.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-debuginfo-0:0.996-2.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-debuginfo-0:0.996-2.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-debuginfo-0:0.996-2.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-debuginfo-0:0.996-2.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-debugsource-0:0.996-2.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-debugsource-0:0.996-2.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-debugsource-0:0.996-2.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-debugsource-0:0.996-2.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-devel-0:0.996-2.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-devel-0:0.996-2.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-devel-0:0.996-2.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-devel-0:0.996-2.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.src::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.src::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-common-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-common-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-common-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-common-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-debugsource-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-debugsource-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-debugsource-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-debugsource-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-devel-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-devel-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-devel-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-devel-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-devel-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-devel-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-devel-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-devel-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-errmsg-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-errmsg-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-errmsg-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-errmsg-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-libs-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-libs-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-libs-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-libs-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-libs-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-libs-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-libs-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-libs-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-server-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-server-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-server-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-server-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-server-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-server-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-server-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-server-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-test-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-test-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-test-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-test-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-test-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.aarch64::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-test-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.ppc64le::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-test-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.s390x::mysql:8.0	—	Vendor Fix fix
Unresolved product id: AppStream-8.9.0.Z.MAIN:mysql-test-debuginfo-0:8.0.36-1.module+el8.9.0+21207+6c20cb3d.x86_64::mysql:8.0	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-21911

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21919

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21920

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21929

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

5.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21933

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21935

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21940

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21945

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21946

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21947

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21953

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21955

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21962

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21966

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21972

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21976

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21977

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21980

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.41 and prior and 8.0.32 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).

7.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-21982

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22005

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22007

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.41 and prior and 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22008

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22032

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22033

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22038

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

2.7 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Low

CVE-2023-22046

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22048

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).

3.1 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Low

CVE-2023-22053

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.42 and prior and 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server and unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H).

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22054

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22056

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22057

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22058

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22059

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22064

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22065

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22066

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22068

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22070

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22078

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22079

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22084

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22092

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22097

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22103

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22104

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22110

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22111

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22112

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22113

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

2.7 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Low

CVE-2023-22114

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2023-22115

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20960

A flaw was found in MySQL Server RAPID. This vulnerability allows a malicious user with low privileges and network access to compromise the MySQL Server. A successful attack can result in the unauthorized ability to cause a hang, or a frequently repeatable crash, a complete denial of service DOS), of MySQL Server.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20961

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20962

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20963

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20964

Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20965

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20966

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20967

5.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20968

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20969

5.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20970

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20971

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20972

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20973

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20974

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20976

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20977

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20978

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20981

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20982

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20983

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20984

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20985

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-20993

A flaw was found in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21049

A flaw was found in the MySQL Server product of Oracle MySQL (component: Server: DML). Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21050

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21051

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21052

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21053

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21055

A flaw was found in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21056

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21057

A flaw was found in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21061

A flaw was found in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21137

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

CVE-2024-21200

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 79 products, the same list as for CVE-2022-4899

Threats

Impact Moderate

References

430 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:0894	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2179864	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188109	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188113	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188115	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188116	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188117	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188118	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188119	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188120	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188121	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188122	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188123	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188124	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188125	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188127	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188128	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188129	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188130	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188131	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188132	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224211	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224212	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224213	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224214	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224215	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224216	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224217	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224218	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224219	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224220	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224221	external
https://bugzilla.redhat.com/show_bug.cgi?id=2224222	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245014	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245015	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245016	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245017	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245018	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245019	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245020	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245021	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245022	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245023	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245024	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245026	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245027	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245028	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245029	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245030	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245031	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245032	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245033	external
https://bugzilla.redhat.com/show_bug.cgi?id=2245034	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258771	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258772	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258773	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258774	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258775	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258776	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258777	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258778	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258779	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258780	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258781	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258782	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258783	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258784	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258785	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258787	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258788	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258789	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258790	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258791	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258792	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258793	external
https://bugzilla.redhat.com/show_bug.cgi?id=2258794	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-4899	self
https://bugzilla.redhat.com/show_bug.cgi?id=2179864	external
https://www.cve.org/CVERecord?id=CVE-2022-4899	external
https://nvd.nist.gov/vuln/detail/CVE-2022-4899	external
https://access.redhat.com/security/cve/CVE-2023-21911	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188109	external
https://www.cve.org/CVERecord?id=CVE-2023-21911	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21911	external
https://access.redhat.com/security/cve/CVE-2023-21919	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188113	external
https://www.cve.org/CVERecord?id=CVE-2023-21919	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21919	external
https://access.redhat.com/security/cve/CVE-2023-21920	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188115	external
https://www.cve.org/CVERecord?id=CVE-2023-21920	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21920	external
https://access.redhat.com/security/cve/CVE-2023-21929	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188116	external
https://www.cve.org/CVERecord?id=CVE-2023-21929	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21929	external
https://access.redhat.com/security/cve/CVE-2023-21933	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188117	external
https://www.cve.org/CVERecord?id=CVE-2023-21933	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21933	external
https://access.redhat.com/security/cve/CVE-2023-21935	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188118	external
https://www.cve.org/CVERecord?id=CVE-2023-21935	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21935	external
https://access.redhat.com/security/cve/CVE-2023-21940	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188119	external
https://www.cve.org/CVERecord?id=CVE-2023-21940	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21940	external
https://access.redhat.com/security/cve/CVE-2023-21945	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188120	external
https://www.cve.org/CVERecord?id=CVE-2023-21945	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21945	external
https://access.redhat.com/security/cve/CVE-2023-21946	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188121	external
https://www.cve.org/CVERecord?id=CVE-2023-21946	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21946	external
https://access.redhat.com/security/cve/CVE-2023-21947	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188122	external
https://www.cve.org/CVERecord?id=CVE-2023-21947	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21947	external
https://access.redhat.com/security/cve/CVE-2023-21953	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188123	external
https://www.cve.org/CVERecord?id=CVE-2023-21953	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21953	external
https://access.redhat.com/security/cve/CVE-2023-21955	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188124	external
https://www.cve.org/CVERecord?id=CVE-2023-21955	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21955	external
https://access.redhat.com/security/cve/CVE-2023-21962	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188125	external
https://www.cve.org/CVERecord?id=CVE-2023-21962	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21962	external
https://access.redhat.com/security/cve/CVE-2023-21966	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188127	external
https://www.cve.org/CVERecord?id=CVE-2023-21966	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21966	external
https://access.redhat.com/security/cve/CVE-2023-21972	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188128	external
https://www.cve.org/CVERecord?id=CVE-2023-21972	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21972	external
https://access.redhat.com/security/cve/CVE-2023-21976	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188129	external
https://www.cve.org/CVERecord?id=CVE-2023-21976	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21976	external
https://access.redhat.com/security/cve/CVE-2023-21977	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188130	external
https://www.cve.org/CVERecord?id=CVE-2023-21977	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21977	external
https://access.redhat.com/security/cve/CVE-2023-21980	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188131	external
https://www.cve.org/CVERecord?id=CVE-2023-21980	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21980	external
https://access.redhat.com/security/cve/CVE-2023-21982	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188132	external
https://www.cve.org/CVERecord?id=CVE-2023-21982	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21982	external
https://access.redhat.com/security/cve/CVE-2023-22005	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224211	external
https://www.cve.org/CVERecord?id=CVE-2023-22005	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22005	external
https://access.redhat.com/security/cve/CVE-2023-22007	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224212	external
https://www.cve.org/CVERecord?id=CVE-2023-22007	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22007	external
https://access.redhat.com/security/cve/CVE-2023-22008	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224213	external
https://www.cve.org/CVERecord?id=CVE-2023-22008	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22008	external
https://access.redhat.com/security/cve/CVE-2023-22032	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245014	external
https://www.cve.org/CVERecord?id=CVE-2023-22032	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22032	external
https://access.redhat.com/security/cve/CVE-2023-22033	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224214	external
https://www.cve.org/CVERecord?id=CVE-2023-22033	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22033	external
https://access.redhat.com/security/cve/CVE-2023-22038	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224215	external
https://www.cve.org/CVERecord?id=CVE-2023-22038	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22038	external
https://access.redhat.com/security/cve/CVE-2023-22046	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224216	external
https://www.cve.org/CVERecord?id=CVE-2023-22046	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22046	external
https://access.redhat.com/security/cve/CVE-2023-22048	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224217	external
https://www.cve.org/CVERecord?id=CVE-2023-22048	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22048	external
https://access.redhat.com/security/cve/CVE-2023-22053	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224218	external
https://www.cve.org/CVERecord?id=CVE-2023-22053	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22053	external
https://access.redhat.com/security/cve/CVE-2023-22054	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224219	external
https://www.cve.org/CVERecord?id=CVE-2023-22054	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22054	external
https://access.redhat.com/security/cve/CVE-2023-22056	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224220	external
https://www.cve.org/CVERecord?id=CVE-2023-22056	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22056	external
https://access.redhat.com/security/cve/CVE-2023-22057	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224221	external
https://www.cve.org/CVERecord?id=CVE-2023-22057	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22057	external
https://access.redhat.com/security/cve/CVE-2023-22058	self
https://bugzilla.redhat.com/show_bug.cgi?id=2224222	external
https://www.cve.org/CVERecord?id=CVE-2023-22058	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22058	external
https://access.redhat.com/security/cve/CVE-2023-22059	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245015	external
https://www.cve.org/CVERecord?id=CVE-2023-22059	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22059	external
https://access.redhat.com/security/cve/CVE-2023-22064	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245016	external
https://www.cve.org/CVERecord?id=CVE-2023-22064	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22064	external
https://access.redhat.com/security/cve/CVE-2023-22065	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245017	external
https://www.cve.org/CVERecord?id=CVE-2023-22065	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22065	external
https://access.redhat.com/security/cve/CVE-2023-22066	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245018	external
https://www.cve.org/CVERecord?id=CVE-2023-22066	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22066	external
https://access.redhat.com/security/cve/CVE-2023-22068	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245019	external
https://www.cve.org/CVERecord?id=CVE-2023-22068	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22068	external
https://access.redhat.com/security/cve/CVE-2023-22070	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245020	external
https://www.cve.org/CVERecord?id=CVE-2023-22070	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22070	external
https://access.redhat.com/security/cve/CVE-2023-22078	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245021	external
https://www.cve.org/CVERecord?id=CVE-2023-22078	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22078	external
https://access.redhat.com/security/cve/CVE-2023-22079	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245022	external
https://www.cve.org/CVERecord?id=CVE-2023-22079	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22079	external
https://access.redhat.com/security/cve/CVE-2023-22084	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245023	external
https://www.cve.org/CVERecord?id=CVE-2023-22084	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22084	external
https://access.redhat.com/security/cve/CVE-2023-22092	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245024	external
https://www.cve.org/CVERecord?id=CVE-2023-22092	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22092	external
https://access.redhat.com/security/cve/CVE-2023-22097	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245026	external
https://www.cve.org/CVERecord?id=CVE-2023-22097	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22097	external
https://access.redhat.com/security/cve/CVE-2023-22103	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245027	external
https://www.cve.org/CVERecord?id=CVE-2023-22103	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22103	external
https://access.redhat.com/security/cve/CVE-2023-22104	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245028	external
https://www.cve.org/CVERecord?id=CVE-2023-22104	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22104	external
https://access.redhat.com/security/cve/CVE-2023-22110	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245029	external
https://www.cve.org/CVERecord?id=CVE-2023-22110	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22110	external
https://access.redhat.com/security/cve/CVE-2023-22111	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245030	external
https://www.cve.org/CVERecord?id=CVE-2023-22111	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22111	external
https://access.redhat.com/security/cve/CVE-2023-22112	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245031	external
https://www.cve.org/CVERecord?id=CVE-2023-22112	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22112	external
https://access.redhat.com/security/cve/CVE-2023-22113	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245032	external
https://www.cve.org/CVERecord?id=CVE-2023-22113	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22113	external
https://access.redhat.com/security/cve/CVE-2023-22114	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245033	external
https://www.cve.org/CVERecord?id=CVE-2023-22114	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22114	external
https://access.redhat.com/security/cve/CVE-2023-22115	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245034	external
https://www.cve.org/CVERecord?id=CVE-2023-22115	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22115	external
https://access.redhat.com/security/cve/CVE-2024-20960	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258771	external
https://www.cve.org/CVERecord?id=CVE-2024-20960	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20960	external
https://www.oracle.com/security-alerts/cpujan2024…	external
https://access.redhat.com/security/cve/CVE-2024-20961	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258772	external
https://www.cve.org/CVERecord?id=CVE-2024-20961	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20961	external
https://access.redhat.com/security/cve/CVE-2024-20962	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258773	external
https://www.cve.org/CVERecord?id=CVE-2024-20962	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20962	external
https://access.redhat.com/security/cve/CVE-2024-20963	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258774	external
https://www.cve.org/CVERecord?id=CVE-2024-20963	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20963	external
https://access.redhat.com/security/cve/CVE-2024-20964	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258775	external
https://www.cve.org/CVERecord?id=CVE-2024-20964	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20964	external
https://access.redhat.com/security/cve/CVE-2024-20965	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258776	external
https://www.cve.org/CVERecord?id=CVE-2024-20965	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20965	external
https://access.redhat.com/security/cve/CVE-2024-20966	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258777	external
https://www.cve.org/CVERecord?id=CVE-2024-20966	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20966	external
https://access.redhat.com/security/cve/CVE-2024-20967	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258778	external
https://www.cve.org/CVERecord?id=CVE-2024-20967	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20967	external
https://access.redhat.com/security/cve/CVE-2024-20968	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258779	external
https://www.cve.org/CVERecord?id=CVE-2024-20968	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20968	external
https://access.redhat.com/security/cve/CVE-2024-20969	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258780	external
https://www.cve.org/CVERecord?id=CVE-2024-20969	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20969	external
https://access.redhat.com/security/cve/CVE-2024-20970	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258781	external
https://www.cve.org/CVERecord?id=CVE-2024-20970	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20970	external
https://access.redhat.com/security/cve/CVE-2024-20971	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258782	external
https://www.cve.org/CVERecord?id=CVE-2024-20971	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20971	external
https://access.redhat.com/security/cve/CVE-2024-20972	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258783	external
https://www.cve.org/CVERecord?id=CVE-2024-20972	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20972	external
https://access.redhat.com/security/cve/CVE-2024-20973	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258784	external
https://www.cve.org/CVERecord?id=CVE-2024-20973	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20973	external
https://access.redhat.com/security/cve/CVE-2024-20974	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258785	external
https://www.cve.org/CVERecord?id=CVE-2024-20974	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20974	external
https://access.redhat.com/security/cve/CVE-2024-20976	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258787	external
https://www.cve.org/CVERecord?id=CVE-2024-20976	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20976	external
https://access.redhat.com/security/cve/CVE-2024-20977	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258788	external
https://www.cve.org/CVERecord?id=CVE-2024-20977	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20977	external
https://access.redhat.com/security/cve/CVE-2024-20978	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258789	external
https://www.cve.org/CVERecord?id=CVE-2024-20978	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20978	external
https://access.redhat.com/security/cve/CVE-2024-20981	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258790	external
https://www.cve.org/CVERecord?id=CVE-2024-20981	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20981	external
https://access.redhat.com/security/cve/CVE-2024-20982	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258791	external
https://www.cve.org/CVERecord?id=CVE-2024-20982	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20982	external
https://access.redhat.com/security/cve/CVE-2024-20983	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258792	external
https://www.cve.org/CVERecord?id=CVE-2024-20983	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20983	external
https://access.redhat.com/security/cve/CVE-2024-20984	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258793	external
https://www.cve.org/CVERecord?id=CVE-2024-20984	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20984	external
https://access.redhat.com/security/cve/CVE-2024-20985	self
https://bugzilla.redhat.com/show_bug.cgi?id=2258794	external
https://www.cve.org/CVERecord?id=CVE-2024-20985	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20985	external
https://access.redhat.com/security/cve/CVE-2024-20993	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275428	external
https://www.cve.org/CVERecord?id=CVE-2024-20993	external
https://nvd.nist.gov/vuln/detail/CVE-2024-20993	external
https://www.oracle.com/security-alerts/cpuapr2024…	external
https://access.redhat.com/security/cve/CVE-2024-21049	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275437	external
https://www.cve.org/CVERecord?id=CVE-2024-21049	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21049	external
https://access.redhat.com/security/cve/CVE-2024-21050	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275438	external
https://www.cve.org/CVERecord?id=CVE-2024-21050	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21050	external
https://access.redhat.com/security/cve/CVE-2024-21051	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275439	external
https://www.cve.org/CVERecord?id=CVE-2024-21051	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21051	external
https://access.redhat.com/security/cve/CVE-2024-21052	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275440	external
https://www.cve.org/CVERecord?id=CVE-2024-21052	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21052	external
https://access.redhat.com/security/cve/CVE-2024-21053	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275441	external
https://www.cve.org/CVERecord?id=CVE-2024-21053	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21053	external
https://access.redhat.com/security/cve/CVE-2024-21055	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275444	external
https://www.cve.org/CVERecord?id=CVE-2024-21055	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21055	external
https://access.redhat.com/security/cve/CVE-2024-21056	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275445	external
https://www.cve.org/CVERecord?id=CVE-2024-21056	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21056	external
https://access.redhat.com/security/cve/CVE-2024-21057	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275446	external
https://www.cve.org/CVERecord?id=CVE-2024-21057	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21057	external
https://access.redhat.com/security/cve/CVE-2024-21061	self
https://bugzilla.redhat.com/show_bug.cgi?id=2275448	external
https://www.cve.org/CVERecord?id=CVE-2024-21061	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21061	external
https://access.redhat.com/security/cve/CVE-2024-21137	self
https://bugzilla.redhat.com/show_bug.cgi?id=2298321	external
https://www.cve.org/CVERecord?id=CVE-2024-21137	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21137	external
https://www.oracle.com/security-alerts/cpujul2024…	external
https://access.redhat.com/security/cve/CVE-2024-21200	self
https://bugzilla.redhat.com/show_bug.cgi?id=2318875	external
https://www.cve.org/CVERecord?id=CVE-2024-21200	external
https://nvd.nist.gov/vuln/detail/CVE-2024-21200	external
https://www.oracle.com/security-alerts/cpuoct2024…	external

JSON

To clipboard

Loading 2.6 MB of JSON…

CVE-2024-20981 (GCVE-0-2024-20981)

Vulnerability from cvelistv5 – Published: 2024-01-16 21:41 – Updated: 2025-06-20 17:51

Summary

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-01-17 16:56 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-400 - Uncontrolled Resource Consumption

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpujan2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024020…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.35 (custom) Affected: * , ≤ 8.2.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:06:37.404Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240201-0003/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20981",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-01-17T16:56:05.429355Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-20T17:51:29.550Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.35",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).  Supported versions that are affected are 8.0.35 and prior and  8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-01T17:06:38.952Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240201-0003/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-20981",
    "datePublished": "2024-01-16T21:41:25.081Z",
    "dateReserved": "2023-12-07T22:28:10.638Z",
    "dateUpdated": "2025-06-20T17:51:29.550Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20982 (GCVE-0-2024-20982)

Vulnerability from cvelistv5 – Published: 2024-02-17 01:50 – Updated: 2025-11-04 18:22

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-22 17:50 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-noinfo Not enough information

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpujan2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024020…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.35 (custom) Affected: * , ≤ 8.2.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20982",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-22T17:50:32.917912Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-26T20:03:43.657Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T18:22:57.177Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20240201-0003/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.35",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.35 and prior and  8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-17T01:50:22.353Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-20982",
    "datePublished": "2024-02-17T01:50:22.353Z",
    "dateReserved": "2023-12-07T22:28:10.638Z",
    "dateUpdated": "2025-11-04T18:22:57.177Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-20983 (GCVE-0-2024-20983)

Vulnerability from cvelistv5 – Published: 2024-01-16 21:41 – Updated: 2025-06-20 17:51

Summary

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-01-17 14:42 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-400 - Uncontrolled Resource Consumption

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpujan2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024020…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.34 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:06:37.400Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240201-0009/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20983",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-01-17T14:42:23.346757Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-20T17:51:56.197Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.34",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-01T17:07:01.955Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240201-0009/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-20983",
    "datePublished": "2024-01-16T21:41:25.405Z",
    "dateReserved": "2023-12-07T22:28:10.638Z",
    "dateUpdated": "2025-06-20T17:51:56.197Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20984 (GCVE-0-2024-20984)

Vulnerability from cvelistv5 – Published: 2024-02-17 01:50 – Updated: 2025-11-04 18:22

Summary

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security : Firewall). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-18 00:31 UTC

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-noinfo Not enough information

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpujan2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024020…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.35 (custom) Affected: * , ≤ 8.2.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20984",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-18T00:31:46.998605Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-07T15:12:52.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T18:22:58.411Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20240201-0003/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.35",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security : Firewall).  Supported versions that are affected are 8.0.35 and prior and  8.2.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-17T01:50:22.747Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-20984",
    "datePublished": "2024-02-17T01:50:22.747Z",
    "dateReserved": "2023-12-07T22:28:10.638Z",
    "dateUpdated": "2025-11-04T18:22:58.411Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-20985 (GCVE-0-2024-20985)

Vulnerability from cvelistv5 – Published: 2024-01-16 21:41 – Updated: 2025-06-20 17:52

Summary

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-01-23 21:46 UTC

CWE

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-400 - Uncontrolled Resource Consumption

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpujan2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024020…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.35 (custom) Affected: * , ≤ 8.2.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:06:37.401Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240201-0003/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20985",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-01-23T21:46:42.977974Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-20T17:52:20.904Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.35",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).  Supported versions that are affected are 8.0.35 and prior and  8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-01T17:06:37.242Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240201-0003/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-20985",
    "datePublished": "2024-01-16T21:41:25.704Z",
    "dateReserved": "2023-12-07T22:28:10.639Z",
    "dateUpdated": "2025-06-20T17:52:20.904Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20993 (GCVE-0-2024-20993)

Vulnerability from cvelistv5 – Published: 2024-04-16 21:25 – Updated: 2025-02-13 17:32

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-17 18:08 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-noinfo Not enough information

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpuapr2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024042…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.35 (custom) Affected: * , ≤ 8.2.0 (custom) cpe:2.3:a:oracle:mysql_server:8.0.35_and_prior:::::::* cpe:2.3:a:oracle:mysql_server:8.2.0_and_prior:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20993",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-17T18:08:39.883635Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-01T15:27:04.656Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:13:41.490Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240426-0014/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:oracle:mysql_server:8.0.35_and_prior:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:mysql_server:8.2.0_and_prior:*:*:*:*:*:*:*"
          ],
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.35",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.35 and prior and  8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-26T09:06:34.282Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240426-0014/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-20993",
    "datePublished": "2024-04-16T21:25:55.794Z",
    "dateReserved": "2023-12-07T22:28:10.642Z",
    "dateUpdated": "2025-02-13T17:32:50.579Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21049 (GCVE-0-2024-21049)

Vulnerability from cvelistv5 – Published: 2024-04-16 21:26 – Updated: 2025-03-13 17:26

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-17 13:45 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-noinfo Not enough information

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpuapr2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024042…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.34 (custom) cpe:2.3:a:oracle:mysql_server:8.0.34_and_prior:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21049",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-17T13:45:12.337363Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T17:26:11.685Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:13:42.425Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240426-0012/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:oracle:mysql_server:8.0.34_and_prior:*:*:*:*:*:*:*"
          ],
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.34",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-26T09:06:40.564Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240426-0012/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-21049",
    "datePublished": "2024-04-16T21:26:14.785Z",
    "dateReserved": "2023-12-07T22:28:10.660Z",
    "dateUpdated": "2025-03-13T17:26:11.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21050 (GCVE-0-2024-21050)

Vulnerability from cvelistv5 – Published: 2024-04-16 21:26 – Updated: 2025-03-28 20:00

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-13 16:59 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-400 - Uncontrolled Resource Consumption

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpuapr2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024042…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.34 (custom) cpe:2.3:a:oracle:mysql_server:8.0.34_and_prior:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21050",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-13T16:59:29.526917Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-28T20:00:25.591Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:13:42.169Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240426-0012/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:oracle:mysql_server:8.0.34_and_prior:*:*:*:*:*:*:*"
          ],
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.34",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-26T09:06:43.616Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240426-0012/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-21050",
    "datePublished": "2024-04-16T21:26:15.106Z",
    "dateReserved": "2023-12-07T22:28:10.660Z",
    "dateUpdated": "2025-03-28T20:00:25.591Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21051 (GCVE-0-2024-21051)

Vulnerability from cvelistv5 – Published: 2024-04-16 21:26 – Updated: 2025-03-28 23:57

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-13 16:56 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-400 - Uncontrolled Resource Consumption

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpuapr2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024042…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.34 (custom) cpe:2.3:a:oracle:mysql_server:8.0.34_and_prior:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21051",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-13T16:56:12.542247Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-28T23:57:16.336Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:13:42.397Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240426-0012/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:oracle:mysql_server:8.0.34_and_prior:*:*:*:*:*:*:*"
          ],
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.34",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-26T09:06:48.120Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240426-0012/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-21051",
    "datePublished": "2024-04-16T21:26:15.429Z",
    "dateReserved": "2023-12-07T22:28:10.660Z",
    "dateUpdated": "2025-03-28T23:57:16.336Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21052 (GCVE-0-2024-21052)

Vulnerability from cvelistv5 – Published: 2024-04-16 21:26 – Updated: 2025-02-13 17:33

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-26 15:13 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-404 - Improper Resource Shutdown or Release

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpuapr2024.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2024042…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: * , ≤ 8.0.34 (custom) cpe:2.3:a:oracle:mysql_server:8.0.34_and_prior:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21052",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-26T15:13:41.572762Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-404",
                "description": "CWE-404 Improper Resource Shutdown or Release",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-03T16:46:47.723Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:13:42.349Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240426-0012/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:oracle:mysql_server:8.0.34_and_prior:*:*:*:*:*:*:*"
          ],
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.34",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-26T09:06:45.189Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240426-0012/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-21052",
    "datePublished": "2024-04-16T21:26:15.734Z",
    "dateReserved": "2023-12-07T22:28:10.661Z",
    "dateUpdated": "2025-02-13T17:33:01.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2024:0894

CVE-2024-20981 (GCVE-0-2024-20981)

CVE-2024-20982 (GCVE-0-2024-20982)

CVE-2024-20983 (GCVE-0-2024-20983)

CVE-2024-20984 (GCVE-0-2024-20984)

CVE-2024-20985 (GCVE-0-2024-20985)

CVE-2024-20993 (GCVE-0-2024-20993)

CVE-2024-21049 (GCVE-0-2024-21049)

CVE-2024-21050 (GCVE-0-2024-21050)

CVE-2024-21051 (GCVE-0-2024-21051)

CVE-2024-21052 (GCVE-0-2024-21052)

Tags

Sightings

Nomenclature