Summary
Er zijn kwetsbaarheden verholpen in Oracle MySQL.
Details
Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
* Denial-of-Service (DoS)
* Toegang tot gevoelige gegevens
* Toegang tot systeemgegevens
* Manipulatie van gegevens
* (Remote) code execution (Gebruikersrechten)
Oplossingen
Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.
Vulnerabilities 33
-
High 8.2
Erroneous authentication pass in Spring Security
In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the Au…
-
High 8.1
.NET Core Remote Code Execution Vulnerability
.NET Core Remote Code Execution Vulnerability
-
High 8.1CVE-2024-22262 Public exploit
CVE-2024-22262: Spring Framework URL Parsing with Host Validation
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html a…
-
High 7.5
Certifi's removal of e-Tugra root certificate
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were…
-
High 7.5
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in t…
-
High 7.5
Apache Tomcat: HTTP/2 header handling DoS
Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after …
-
High 7.5
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD…
-
Medium 6.5
POLY1305 MAC implementation corrupts vector registers on PowerPC
Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker ca…
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 6.3
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that ar…
-
Medium 6.2
Quoted zip-bomb protection for zipfile
An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compressi…
-
Medium 5.9
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…
-
Medium 5.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 5.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 5.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that …
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that …
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions …
Revision history
-
#0
Initiele versie
References
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2021-24112
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2023-37920
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2023-48795
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2023-52425
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2023-6129
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-0450
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-20996
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21125
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21127
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21129
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21130
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21134
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21135
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21137
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21142
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21157
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21159
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21160
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21162
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21163
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21165
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21166
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21170
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21171
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21173
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21176
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21177
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21179
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21185
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-22257
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-22262
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-24549
-
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-25062
-
Reference - cveprojectv5; ibm; nvd; oracle
https://www.oracle.com/security-alerts/cpujul2024.html