Vulnerability-Lookup

RHSA-2023_2621

Vulnerability from csaf_redhat - Published: 2023-05-09 11:21 - Updated: 2024-11-15 17:16

Summary

Red Hat Security Advisory: mysql security update

Severity

Important

Notes

Topic: An update for mysql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177731, BZ#2177732) Security Fix(es): * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594) * mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611) * mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632) * mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410) * mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883) * mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887) * mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917) * mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-21594

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-common-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-common-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-common-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-common-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-debugsource-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-debugsource-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-debugsource-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-debugsource-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-devel-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-devel-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-devel-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-devel-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-devel-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-devel-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-devel-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-devel-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-errmsg-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-errmsg-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-errmsg-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-errmsg-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-libs-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-libs-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-libs-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-libs-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-libs-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-libs-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-libs-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-libs-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-server-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-server-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-server-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-server-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-server-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-server-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-server-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-server-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-test-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-test-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-test-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-test-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-test-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-test-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-test-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.Z.MAIN.EUS:mysql-test-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.src	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-common-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-common-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-common-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-common-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-debugsource-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-debugsource-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-debugsource-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-debugsource-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-devel-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-devel-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-devel-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-devel-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-devel-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-devel-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-devel-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-devel-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-errmsg-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-errmsg-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-errmsg-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-errmsg-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-libs-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-libs-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-libs-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-libs-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-libs-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-libs-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-libs-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-libs-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-server-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-server-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-server-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-server-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-server-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-server-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-server-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-server-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-test-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-test-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-test-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-test-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-test-debuginfo-0:8.0.32-1.el9_2.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-test-debuginfo-0:8.0.32-1.el9_2.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-test-debuginfo-0:8.0.32-1.el9_2.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.2.0.Z.MAIN.EUS:mysql-test-debuginfo-0:8.0.32-1.el9_2.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-21599

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21604

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21608

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21611

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21617

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21625

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21632

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21633

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21637

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-21640

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-39400

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-39408

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2022-39410

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21836

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21863

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21864

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21865

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21867

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21868

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21869

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

5.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21870

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21871

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21873

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21874

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

2.7 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Low

CVE-2023-21875

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.31 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H).

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21876

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21877

5.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21878

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21879

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21880

5.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21881

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21882

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

2.7 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Low

CVE-2023-21883

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21887

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21912

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.41 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Important

CVE-2023-21913

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21917

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-21963

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.40 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

2.7 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Low

CVE-2023-22015

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-22026

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

CVE-2023-22028

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.43 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 106 products, the same list as for CVE-2022-21594

Threats

Impact Moderate

References

208 references

URL	Category
https://access.redhat.com/errata/RHSA-2023:2621	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142861	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142863	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142865	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142868	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142869	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142870	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142871	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142872	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142873	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142875	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142877	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142879	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142880	external
https://bugzilla.redhat.com/show_bug.cgi?id=2142881	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162268	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162270	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162271	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162272	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162274	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162275	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162276	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162277	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162278	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162280	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162281	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162282	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162283	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162284	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162285	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162286	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162287	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162288	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162289	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162290	external
https://bugzilla.redhat.com/show_bug.cgi?id=2162291	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188110	external
https://bugzilla.redhat.com/show_bug.cgi?id=2188112	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-21594	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142861	external
https://www.cve.org/CVERecord?id=CVE-2022-21594	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21594	external
https://access.redhat.com/security/cve/CVE-2022-21599	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142863	external
https://www.cve.org/CVERecord?id=CVE-2022-21599	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21599	external
https://access.redhat.com/security/cve/CVE-2022-21604	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142865	external
https://www.cve.org/CVERecord?id=CVE-2022-21604	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21604	external
https://access.redhat.com/security/cve/CVE-2022-21608	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142868	external
https://www.cve.org/CVERecord?id=CVE-2022-21608	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21608	external
https://access.redhat.com/security/cve/CVE-2022-21611	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142869	external
https://www.cve.org/CVERecord?id=CVE-2022-21611	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21611	external
https://access.redhat.com/security/cve/CVE-2022-21617	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142870	external
https://www.cve.org/CVERecord?id=CVE-2022-21617	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21617	external
https://access.redhat.com/security/cve/CVE-2022-21625	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142871	external
https://www.cve.org/CVERecord?id=CVE-2022-21625	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21625	external
https://access.redhat.com/security/cve/CVE-2022-21632	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142872	external
https://www.cve.org/CVERecord?id=CVE-2022-21632	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21632	external
https://access.redhat.com/security/cve/CVE-2022-21633	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142873	external
https://www.cve.org/CVERecord?id=CVE-2022-21633	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21633	external
https://access.redhat.com/security/cve/CVE-2022-21637	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142875	external
https://www.cve.org/CVERecord?id=CVE-2022-21637	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21637	external
https://access.redhat.com/security/cve/CVE-2022-21640	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142877	external
https://www.cve.org/CVERecord?id=CVE-2022-21640	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21640	external
https://access.redhat.com/security/cve/CVE-2022-39400	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142879	external
https://www.cve.org/CVERecord?id=CVE-2022-39400	external
https://nvd.nist.gov/vuln/detail/CVE-2022-39400	external
https://access.redhat.com/security/cve/CVE-2022-39408	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142880	external
https://www.cve.org/CVERecord?id=CVE-2022-39408	external
https://nvd.nist.gov/vuln/detail/CVE-2022-39408	external
https://access.redhat.com/security/cve/CVE-2022-39410	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142881	external
https://www.cve.org/CVERecord?id=CVE-2022-39410	external
https://nvd.nist.gov/vuln/detail/CVE-2022-39410	external
https://access.redhat.com/security/cve/CVE-2023-21836	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162268	external
https://www.cve.org/CVERecord?id=CVE-2023-21836	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21836	external
https://access.redhat.com/security/cve/CVE-2023-21863	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162270	external
https://www.cve.org/CVERecord?id=CVE-2023-21863	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21863	external
https://access.redhat.com/security/cve/CVE-2023-21864	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162271	external
https://www.cve.org/CVERecord?id=CVE-2023-21864	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21864	external
https://access.redhat.com/security/cve/CVE-2023-21865	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162272	external
https://www.cve.org/CVERecord?id=CVE-2023-21865	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21865	external
https://access.redhat.com/security/cve/CVE-2023-21867	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162274	external
https://www.cve.org/CVERecord?id=CVE-2023-21867	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21867	external
https://access.redhat.com/security/cve/CVE-2023-21868	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162275	external
https://www.cve.org/CVERecord?id=CVE-2023-21868	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21868	external
https://access.redhat.com/security/cve/CVE-2023-21869	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162276	external
https://www.cve.org/CVERecord?id=CVE-2023-21869	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21869	external
https://access.redhat.com/security/cve/CVE-2023-21870	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162277	external
https://www.cve.org/CVERecord?id=CVE-2023-21870	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21870	external
https://access.redhat.com/security/cve/CVE-2023-21871	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162278	external
https://www.cve.org/CVERecord?id=CVE-2023-21871	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21871	external
https://access.redhat.com/security/cve/CVE-2023-21873	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162280	external
https://www.cve.org/CVERecord?id=CVE-2023-21873	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21873	external
https://access.redhat.com/security/cve/CVE-2023-21874	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162281	external
https://www.cve.org/CVERecord?id=CVE-2023-21874	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21874	external
https://access.redhat.com/security/cve/CVE-2023-21875	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162282	external
https://www.cve.org/CVERecord?id=CVE-2023-21875	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21875	external
https://access.redhat.com/security/cve/CVE-2023-21876	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162283	external
https://www.cve.org/CVERecord?id=CVE-2023-21876	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21876	external
https://access.redhat.com/security/cve/CVE-2023-21877	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162284	external
https://www.cve.org/CVERecord?id=CVE-2023-21877	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21877	external
https://access.redhat.com/security/cve/CVE-2023-21878	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162285	external
https://www.cve.org/CVERecord?id=CVE-2023-21878	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21878	external
https://access.redhat.com/security/cve/CVE-2023-21879	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162286	external
https://www.cve.org/CVERecord?id=CVE-2023-21879	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21879	external
https://access.redhat.com/security/cve/CVE-2023-21880	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162287	external
https://www.cve.org/CVERecord?id=CVE-2023-21880	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21880	external
https://access.redhat.com/security/cve/CVE-2023-21881	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162288	external
https://www.cve.org/CVERecord?id=CVE-2023-21881	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21881	external
https://access.redhat.com/security/cve/CVE-2023-21882	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162289	external
https://www.cve.org/CVERecord?id=CVE-2023-21882	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21882	external
https://access.redhat.com/security/cve/CVE-2023-21883	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162290	external
https://www.cve.org/CVERecord?id=CVE-2023-21883	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21883	external
https://access.redhat.com/security/cve/CVE-2023-21887	self
https://bugzilla.redhat.com/show_bug.cgi?id=2162291	external
https://www.cve.org/CVERecord?id=CVE-2023-21887	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21887	external
https://access.redhat.com/security/cve/CVE-2023-21912	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188110	external
https://www.cve.org/CVERecord?id=CVE-2023-21912	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21912	external
https://access.redhat.com/security/cve/CVE-2023-21913	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188111	external
https://www.cve.org/CVERecord?id=CVE-2023-21913	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21913	external
https://access.redhat.com/security/cve/CVE-2023-21917	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188112	external
https://www.cve.org/CVERecord?id=CVE-2023-21917	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21917	external
https://access.redhat.com/security/cve/CVE-2023-21963	self
https://bugzilla.redhat.com/show_bug.cgi?id=2188126	external
https://www.cve.org/CVERecord?id=CVE-2023-21963	external
https://nvd.nist.gov/vuln/detail/CVE-2023-21963	external
https://access.redhat.com/security/cve/CVE-2023-22015	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245011	external
https://www.cve.org/CVERecord?id=CVE-2023-22015	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22015	external
https://access.redhat.com/security/cve/CVE-2023-22026	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245012	external
https://www.cve.org/CVERecord?id=CVE-2023-22026	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22026	external
https://access.redhat.com/security/cve/CVE-2023-22028	self
https://bugzilla.redhat.com/show_bug.cgi?id=2245013	external
https://www.cve.org/CVERecord?id=CVE-2023-22028	external
https://nvd.nist.gov/vuln/detail/CVE-2023-22028	external

JSON

To clipboard

Loading 1.2 MB of JSON…

CVE-2022-21594 (GCVE-0-2022-21594)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 19:40

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:21 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:38.394Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21594",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:21:14.824361Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T19:40:56.987Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21594",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T19:40:56.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21599 (GCVE-0-2022-21599)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 19:31

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:21 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:39.222Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21599",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:21:12.863531Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T19:31:40.295Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21599",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T19:31:40.295Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21604 (GCVE-0-2022-21604)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 15:42

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:21 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:39.294Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21604",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:21:11.807714Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T15:42:55.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21604",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T15:42:55.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21608 (GCVE-0-2022-21608)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 15:39

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:21 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.7.39 and prior Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:39.264Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21608",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:21:07.054547Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T15:39:19.514Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.39 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21608",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T15:39:19.514Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21611 (GCVE-0-2022-21611)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 15:38

Summary

Severity

4.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:21 UTC

CWE

Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:39.157Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21611",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:21:03.368166Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T15:38:07.829Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21611",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T15:38:07.829Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21617 (GCVE-0-2022-21617)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 15:31

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:20 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.7.39 and prior Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:38.899Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21617",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:20:58.026651Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T15:31:51.041Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.39 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21617",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T15:31:51.041Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21625 (GCVE-0-2022-21625)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 15:03

Summary

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:20 UTC

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:39.177Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21625",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:20:55.291719Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T15:03:30.210Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21625",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T15:03:30.210Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21632 (GCVE-0-2022-21632)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 15:55

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:20 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:39.437Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21632",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:20:50.400674Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T15:55:16.972Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21632",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T15:55:16.972Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21633 (GCVE-0-2022-21633)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 15:54

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:20 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:39.073Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21633",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:20:49.214943Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T15:54:52.157Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21633",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T15:54:52.157Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21637 (GCVE-0-2022-21637)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 15:01

Summary

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:20 UTC

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.30 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:39.117Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          },
          {
            "name": "FEDORA-2023-e449235964",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
          },
          {
            "name": "FEDORA-2023-d332f0b6a3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21637",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:20:45.869795Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T15:01:18.291Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.30 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-16T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        },
        {
          "name": "FEDORA-2023-e449235964",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGZ4B5IQJEZQFSXGCZKSJ6GO3HLQ6URQ/"
        },
        {
          "name": "FEDORA-2023-d332f0b6a3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EG3VBUHKCUXVWBSCD2FHCWIAMZO4X3PR/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21637",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T15:01:18.291Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2023_2621

CVE-2022-21594 (GCVE-0-2022-21594)

CVE-2022-21599 (GCVE-0-2022-21599)

CVE-2022-21604 (GCVE-0-2022-21604)

CVE-2022-21608 (GCVE-0-2022-21608)

CVE-2022-21611 (GCVE-0-2022-21611)

CVE-2022-21617 (GCVE-0-2022-21617)

CVE-2022-21625 (GCVE-0-2022-21625)

CVE-2022-21632 (GCVE-0-2022-21632)

CVE-2022-21633 (GCVE-0-2022-21633)

CVE-2022-21637 (GCVE-0-2022-21637)

Tags

Sightings

Nomenclature