rpm package

almalinux/mysql

pkg:rpm/almalinux/mysql

Vulnerabilities (534)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2023-21920	Med	4.9	< 8.0.36-1.module_el8.9.0+3735+82bd6c11	8.0.36-1.module_el8.9.0+3735+82bd6c11	Apr 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21919	Med	4.9	< 8.0.36-1.module_el8.9.0+3735+82bd6c11	8.0.36-1.module_el8.9.0+3735+82bd6c11	Apr 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
CVE-2023-21917	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Apr 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21912	Hig	7.5	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Apr 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.41 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple
CVE-2023-21911	Med	4.9	< 8.0.36-1.module_el8.9.0+3735+82bd6c11	8.0.36-1.module_el8.9.0+3735+82bd6c11	Apr 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ
CVE-2022-4899	Hig	7.5	< 8.0.36-1.module_el8.9.0+3735+82bd6c11	8.0.36-1.module_el8.9.0+3735+82bd6c11	Mar 31, 2023	A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
CVE-2023-21887	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
CVE-2023-21883	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21882	Low	2.7	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21881	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21880	Med	5.5	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ
CVE-2023-21879	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21878	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21877	Med	5.5	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ
CVE-2023-21876	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21875	Med	5.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.31 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compro
CVE-2023-21874	Low	2.7	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS
CVE-2023-21873	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21871	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ
CVE-2023-21870	Med	4.9	< 8.0.32-1.el9_2	8.0.32-1.el9_2	Jan 18, 2023	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se

CVE-2023-21920MedApr 18, 2023
affected < 8.0.36-1.module_el8.9.0+3735+82bd6c11fixed 8.0.36-1.module_el8.9.0+3735+82bd6c11
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21919MedApr 18, 2023
affected < 8.0.36-1.module_el8.9.0+3735+82bd6c11fixed 8.0.36-1.module_el8.9.0+3735+82bd6c11
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
CVE-2023-21917MedApr 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21912HigApr 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.41 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple
CVE-2023-21911MedApr 18, 2023
affected < 8.0.36-1.module_el8.9.0+3735+82bd6c11fixed 8.0.36-1.module_el8.9.0+3735+82bd6c11
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ
CVE-2022-4899HigMar 31, 2023
affected < 8.0.36-1.module_el8.9.0+3735+82bd6c11fixed 8.0.36-1.module_el8.9.0+3735+82bd6c11
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
CVE-2023-21887MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
CVE-2023-21883MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21882LowJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21881MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21880MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ
CVE-2023-21879MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21878MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21877MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ
CVE-2023-21876MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21875MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.31 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compro
CVE-2023-21874LowJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS
CVE-2023-21873MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se
CVE-2023-21871MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ
CVE-2023-21870MedJan 18, 2023
affected < 8.0.32-1.el9_2fixed 8.0.32-1.el9_2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se

Page 13 of 27