High NCSC-2025-0024 37 CVEs

Kwetsbaarheden verholpen in Oracle MySQL

Published Jan 22, 2025 · Updated Jan 22, 2025 · nl

Vendor: Oracle Product: MySQL Product: MySQL Cluster Product: MySQL Enterprise Firewall Product: MySQL Server Product: mysql___7.5.35 Product: mysql___7.6.31 Product: mysql___8.0.35 Product: mysql___8.0.38 Product: mysql___8.0.39 Product: mysql___8.4.1 Product: mysql___8.4.2 Product: mysql___9.0.0 Product: mysql___9.0.1 Product: mysql_connector\/python Product: mysql_enterprise_backup

Summary

Oracle heeft kwetsbaarheden verholpen in Oracle MySQL.

Details

Interpretaties
De kwetsbaarheden stellen een kwaadwillende in staat om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

- Denial-of-Service (DoS)
- Manipulatie van gegevens
- Omzeilen van een beveiligingsmaatregel
- Toegang tot gevoelige gegevens

Oplossingen
Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 37

Critical 9.1

CVE-2024-37371

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handlin…

krb5 krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine

Jun 28, 2024
High 7.5

CVE-2024-37370

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GS…

krb5 krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine

Jun 28, 2024
High 7.5

CVE-2025-21521

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 21, 2025
Medium 6.5

CVE-2025-21500

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 6.5

CVE-2025-21501

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 6.5

CVE-2025-21518

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu

Jan 21, 2025
Medium 6.5

CVE-2025-21522

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 6.5

CVE-2025-21566

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 6.4

CVE-2025-21548

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that ar…

Oracle MySQL Connectors mysql-connector-python Ubuntu

Jan 21, 2025
Medium 5.6

CVE-2024-35195

Requests `Session` object does not verify requests after making first request with verify=False

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification r…

psf requests katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

May 20, 2024
Medium 5.5

CVE-2021-37519

Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted a…

memcached memcached Debian Ubuntu

Feb 3, 2023
Medium 5.5

CVE-2025-21497

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 5.5

CVE-2025-21555

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 5.5

CVE-2025-21559

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 5.4

CVE-2025-21540

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21490

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux Alpine Wolfi

Jan 21, 2025
Medium 4.9

CVE-2025-21491

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21492

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21499

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21503

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21504

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21505

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21523

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21525

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21529

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21531

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21534

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Performance Schema). Supported versions t…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21536

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.9

CVE-2025-21543

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are a…

Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu

Jan 21, 2025
Medium 4.4

CVE-2025-21493

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.4

CVE-2025-21495

Vulnerability in the MySQL Enterprise Firewall product of Oracle MySQL (component: Firewall). Supported versions that a…

Oracle MySQL Enterprise Firewall

Jan 21, 2025
Medium 4.4

CVE-2025-21519

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.3

CVE-2025-21567

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Medium 4.1

CVE-2025-21494

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Low 3.8

CVE-2025-21546

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 21, 2025
Low 3.4

CVE-2024-11053

netrc and redirect credential leak

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that …

curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024
Low 1.8

CVE-2025-21520

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are aff…

Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu

Jan 21, 2025

Revision history

2025-01-22 #0
Initiele versie

References

Reference - cveprojectv5; nvd; oracle
https://www.oracle.com/security-alerts/cpujan2025.html