Threats affecting pkg:deb/mysql/mysql-server

CVE-2026-101760 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities, and customers are strongly advised to apply these patches promptly.

CVE-2026-101615 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions of the InnoDB component. It allows a high privileged attacker with logon access to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.4, indicating medium severity. Oracle has released patches addressing this vulnerability in their October 2026 Critical Patch Update.

CVE-2026-101613 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating a medium severity. Oracle has released security patches addressing this issue as part of their October 2026 Critical Patch Update.

CVE-2026-101608 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or repeatedly crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity. Oracle has released security patches addressing this issue as part of their October 2026 Critical Patch Update.

CVE-2026-61109 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting certain versions. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity. Affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, and MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. Oracle's July 2026 Critical Patch Update advisory lists this vulnerability but does not explicitly confirm patch availability or remediation status for these versions.

CVE-2026-61096 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting certain versions. It allows an unauthenticated attacker with logon access to the infrastructure to potentially perform unauthorized update, insert, or delete operations on accessible data. The vulnerability is difficult to exploit and impacts data integrity without affecting confidentiality or availability. The CVSS 3.1 base score is 2.9, indicating low severity. Affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. Oracle's July 2026 Critical Patch Update advisory lists this vulnerability among many others but does not explicitly confirm patch availability or remediation status for this specific issue.

CVE-2026-60191 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions. It allows a high privileged attacker with logon access to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. The affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. The CVSS 3.1 base score is 4.1, indicating medium severity. Oracle has published a Critical Patch Update advisory that includes patches for this vulnerability, but no explicit patch or remediation level is stated in the provided data.

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-47008 is a vulnerability in Oracle MySQL Server and MySQL Cluster (component: InnoDB) affecting versions 9.7.0 through 9.7.1. It allows a high privileged attacker with network access via multiple protocols to cause a hang or frequent crash, resulting in a denial of service (DoS). The vulnerability has a CVSS 3.1 base score of 4.9, indicating a medium severity focused on availability impact. No patch or official fix status is explicitly stated in the vendor advisory, which recommends applying Oracle Critical Patch Updates promptly. No known exploits in the wild have been reported.

CVE-2026-35236 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-35235 is a vulnerability in Oracle MySQL Server versions 9.0.0 through 9.6.0 affecting the GIS component. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the MySQL Server. The vulnerability has a CVSS 3.1 base score of 4.9, indicating a medium severity focused on availability impact. Oracle has included this vulnerability in its April 2026 Critical Patch Update advisory, which addresses multiple security issues across Oracle products including MySQL Server.

CVE-2026-34308 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 to 8.0.45, 8.4.0 to 8.4.8, and 9.0.

CVE-2026-34293 is a vulnerability in Oracle MySQL Server versions 8.0.0 through 8.0.45 affecting the Server: DML component. It allows a high privileged attacker with network access via multiple protocols to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability has a CVSS 3.1 base score of 4.9, indicating a medium severity focused on availability impact. Oracle has included this vulnerability in its April 2026 Critical Patch Update advisory, which provides patches addressing this and other vulnerabilities.

CVE-2026-34271 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-22017 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-22009 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).