Threats affecting pkg:deb/mysql/mysql-server

54 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.9	EPSS 0.9%	CVE-2024-21127Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.9%2024-07-16CVE Database V5CVE-2024-21127 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability CWE-400	CVE Database V5	2024-07-16
Medium	4.9	EPSS 1.0%	CVE-2024-21057Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 1.0%2024-04-16CVE Database V5CVE-2024-21057 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability CWE-400	CVE Database V5	2024-04-16
Medium	4.9	EPSS 1.1%	CVE-2024-20982Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 1.1%2024-02-17CVE Database V5CVE-2024-20982 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.1%Vulnerability	CVE Database V5	2024-02-17
Medium	4.9	EPSS 1.0%	CVE-2024-20978Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 1.0%2024-02-17CVE Database V5CVE-2024-20978 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability CWE-400	CVE Database V5	2024-02-17
Medium	4.9	EPSS 1.1%	CVE-2024-20976Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 1.1%2024-02-17CVE Database V5CVE-2024-20976 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.1%Vulnerability CWE-400	CVE Database V5	2024-02-17
Medium	4.9	EPSS 0.9%	CVE-2024-20974Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 0.9%2024-02-17CVE Database V5CVE-2024-20974 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability	CVE Database V5	2024-02-17
Medium	4.9	EPSS 1.1%	CVE-2024-20972Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 1.1%2024-02-17CVE Database V5CVE-2024-20972 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.1%Vulnerability CWE-400	CVE Database V5	2024-02-17
Medium	4.9	EPSS 1.1%	CVE-2024-20970Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 1.1%2024-02-17CVE Database V5CVE-2024-20970 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.1%Vulnerability	CVE Database V5	2024-02-17
Medium	4.4	EPSS 0.9%	CVE-2024-20968Oracle MySQL Server · Unthrottled Resource Allocation Medium4.4EPSS 0.9%2024-02-17CVE Database V5CVE-2024-20968 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability CWE-770	CVE Database V5	2024-02-17
Medium	4.9	EPSS 1.1%	CVE-2024-20966Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium4.9EPSS 1.1%2024-02-17CVE Database V5CVE-2024-20966 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.1%Vulnerability CWE-404	CVE Database V5	2024-02-17
Medium	6.5	EPSS 1.1%	CVE-2024-20962Oracle MySQL Server · Uncontrolled Resource Consumption Medium6.5EPSS 1.1%2024-02-17CVE Database V5CVE-2024-20962 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). EPSS 1.1%Vulnerability CWE-400	CVE Database V5	2024-02-17
Medium	6.5	EPSS 1.1%	CVE-2024-20960Oracle MySQL Server · Easily exploitable vulnerability allows low privileged attacker with network access via multiple Medium6.5EPSS 1.1%2024-02-17CVE Database V5CVE-2024-20960 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). EPSS 1.1%Vulnerability	CVE Database V5	2024-02-17
Medium	4.9	EPSS 1.0%	CVE-2024-20971Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 1.0%2024-01-16CVE Database V5CVE-2024-20971 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability CWE-400	CVE Database V5	2024-01-16
Medium	5.5	EPSS 0.8%	CVE-2024-20967Oracle MySQL Server · Easily exploitable vulnerability allows high privileged attacker with network access via multiple Medium5.5EPSS 0.8%2024-01-16CVE Database V5CVE-2024-20967 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). EPSS 0.8%Vulnerability	CVE Database V5	2024-01-16

Page 3 of 3