Threats affecting pkg:rpm/mysql/mysql-server

54 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.6%	CVE-2025-21567Oracle MySQL Server · Incorrect Authorization Medium4.3EPSS 0.6%2025-01-21CVE Database V5CVE-2025-21567 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). EPSS 0.6%Vulnerability CWE-863	CVE Database V5	2025-01-21
Medium	5.5	EPSS 0.7%	CVE-2025-21559Oracle MySQL Server · Missing Authentication Medium5.5EPSS 0.7%2025-01-21CVE Database V5CVE-2025-21559 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). EPSS 0.7%Vulnerability CWE-306	CVE Database V5	2025-01-21
Medium	4.9	EPSS 1.0%	CVE-2025-21536Oracle MySQL Server · Unthrottled Resource Allocation Medium4.9EPSS 1.0%2025-01-21CVE Database V5CVE-2025-21536 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability CWE-770	CVE Database V5	2025-01-21
Medium	4.9	EPSS 0.9%	CVE-2025-21523Oracle MySQL Server · Incorrect Permissions Medium4.9EPSS 0.9%2025-01-21CVE Database V5CVE-2025-21523 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability CWE-732	CVE Database V5	2025-01-21
Medium	6.5	EPSS 1.0%	CVE-2025-21500Oracle MySQL Server · Unthrottled Resource Allocation Medium6.5EPSS 1.0%2025-01-21CVE Database V5CVE-2025-21500 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability CWE-770	CVE Database V5	2025-01-21
Medium	4.9	EPSS 1.0%	CVE-2025-21491Oracle MySQL Server · Unthrottled Resource Allocation Medium4.9EPSS 1.0%2025-01-21CVE Database V5CVE-2025-21491 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability CWE-770	CVE Database V5	2025-01-21
Medium	4.9	EPSS 1.3%	CVE-2025-21490Oracle MySQL Server · Unthrottled Resource Allocation Medium4.9EPSS 1.3%2025-01-21CVE Database V5CVE-2025-21490 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.3%Vulnerability CWE-770	CVE Database V5	2025-01-21
Medium	4.9	EPSS 1.0%	CVE-2024-21239Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 1.0%2024-10-15CVE Database V5CVE-2024-21239 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability	CVE Database V5	2024-10-15
Low	2.2	EPSS 0.7%	CVE-2024-21237Oracle MySQL Server · Difficult to exploit vulnerability allows high privileged attacker with network access via multiple Low2.2EPSS 0.7%2024-10-15CVE Database V5CVE-2024-21237 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L). EPSS 0.7%Vulnerability	CVE Database V5	2024-10-15
Medium	4.9	EPSS 1.1%	CVE-2024-21236Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 1.1%2024-10-15CVE Database V5CVE-2024-21236 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.1%Vulnerability	CVE Database V5	2024-10-15
Low	2.2	EPSS 0.8%	CVE-2024-21232Oracle MySQL Server · Uncontrolled Resource Consumption Low2.2EPSS 0.8%2024-10-15CVE Database V5CVE-2024-21232 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L). EPSS 0.8%Vulnerability CWE-400	CVE Database V5	2024-10-15
Medium	4.2	EPSS 0.3%	CVE-2024-21213Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure Medium4.2EPSS 0.3%2024-10-15CVE Database V5CVE-2024-21213 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H). EPSS 0.3%Vulnerability	CVE Database V5	2024-10-15
Medium	4.9	EPSS 0.9%	CVE-2024-21201Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 0.9%2024-10-15CVE Database V5CVE-2024-21201 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability	CVE Database V5	2024-10-15
Medium	4.9	EPSS 0.9%	CVE-2024-21198Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 0.9%2024-10-15CVE Database V5CVE-2024-21198 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability	CVE Database V5	2024-10-15
Medium	4.9	EPSS 0.8%	CVE-2024-21173Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.8%2024-07-16CVE Database V5CVE-2024-21173 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.8%Vulnerability CWE-400	CVE Database V5	2024-07-16
Medium	4.9	EPSS 0.9%	CVE-2024-21162Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 0.9%2024-07-16CVE Database V5CVE-2024-21162 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability	CVE Database V5	2024-07-16
Medium	4.9	EPSS 0.8%	CVE-2024-21159Oracle MySQL Server · Improper Authorization Medium4.9EPSS 0.8%2024-07-16CVE Database V5CVE-2024-21159 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.8%Vulnerability CWE-285	CVE Database V5	2024-07-16
Medium	4.9	EPSS 0.9%	CVE-2024-21135Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 0.9%2024-07-16CVE Database V5CVE-2024-21135 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability	CVE Database V5	2024-07-16
Medium	4.9	EPSS 0.8%	CVE-2024-21130Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.8%2024-07-16CVE Database V5CVE-2024-21130 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.8%Vulnerability CWE-400	CVE Database V5	2024-07-16
Medium	4.9	EPSS 0.9%	CVE-2024-21129Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 0.9%2024-07-16CVE Database V5CVE-2024-21129 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability	CVE Database V5	2024-07-16

Page 2 of 3