Oracle MySQL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 39

• Critical 9.8
  CVE-2022-22965 Exploited Public exploit Scanner template EPSS 100%

  Remote Code Execution in Spring Framework

  A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot…

  libspring-java libspring-java org.springframework:spring-webmvc org.springframework:spring-webflux Debian Ubuntu Maven
  Apr 1, 2022

  KEV Apr 4, 2022
• Critical 9.8
  CVE-2022-23305 Public exploit EPSS 67%

  SQL injection in JDBC Appender in Apache Log4j V1

  By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate…

  Apache Software Foundation Apache Log4j 1.x druid apache-log4j1.2 Debian Ubuntu Wolfi Maven
  Jan 18, 2022
• High 7.5
  CVE-2021-42340 EPSS 12%

  DoS via memory leak with WebSocket connections

  The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket c…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Maven
  Oct 14, 2021
• High 7.5
  CVE-2022-0778 Public exploit EPSS 73%

  Infinite loop in BN_mod_sqrt() reachable when parsing certificates

  The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io
  Mar 15, 2022
• High 7.0
  CVE-2022-23181

  Local privilege escalation with FileStore

  The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of …

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Jan 27, 2022
• Medium 6.6
  CVE-2021-44832 Public exploit EPSS 98%

  Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

  Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control o…

  Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Dec 28, 2021
• Medium 6.5
  CVE-2021-22570

  Nullptr Dereference in Protobuf

  Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is …

  Google Protobuf mysql druid Debian Ubuntu Azure Linux Wolfi PyPI
  Jan 26, 2022
• Medium 6.5
  CVE-2021-41184 Public exploit EPSS 41%

  XSS in the `of` option of the `.position()` util

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…

  jquery jquery-ui jQuery.UI.Combined org.webjars.npm:jquery-ui Debian Ubuntu npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.5
  CVE-2022-21454

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 6.3
  CVE-2022-21482

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL Cluster percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 6.3
  CVE-2022-21483

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL Cluster percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 6.3
  CVE-2022-21489 EPSS 79%

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL Cluster percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 6.3
  CVE-2022-21490 EPSS 79%

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL Cluster percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 5.9
  CVE-2022-21457

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 5.5
  CVE-2022-21425

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 5.5
  CVE-2022-21440

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 5.5
  CVE-2022-21459

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 5.5
  CVE-2022-21478

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 5.5
  CVE-2022-21479

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 5.0
  CVE-2022-21418

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21412

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21413

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21414

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21415

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21417

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21427

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux Alpine
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21435

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21436

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21437

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21438

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21452

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.9
  CVE-2022-21462

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022
• Medium 4.4
  CVE-2022-21444

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 4.4
  CVE-2022-21451

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Medium 4.4
  CVE-2022-21460

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are aff…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Low 2.9
  CVE-2022-21484

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL Cluster percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Low 2.9
  CVE-2022-21485

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL Cluster percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Low 2.9
  CVE-2022-21486

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL Cluster percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 19, 2022
• Low 2.7
  CVE-2022-21423

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 19, 2022

Revision history

1. 2026-01-25 #27

   Neue Updates von Dell aufgenommen

2. 2024-05-28 #26

   Neue Updates von Red Hat aufgenommen

3. 2023-02-22 #25

   Neue Updates von Amazon aufgenommen

4. 2023-02-06 #24

   Neue Updates von Amazon aufgenommen

5. 2022-12-15 #23

   Neue Updates von Red Hat aufgenommen

6. 2022-12-07 #22

   Neue Updates von Red Hat aufgenommen

7. 2022-11-21 #21

   Neue Updates von Oracle Linux aufgenommen

8. 2022-11-15 #20

   Neue Updates von Red Hat aufgenommen

9. 2022-11-08 #19

   Neue Updates von Red Hat aufgenommen

10. 2022-11-06 #18

    Neue Updates von Amazon aufgenommen

11. 2022-10-26 #17

    Neue Updates von Oracle Linux aufgenommen

12. 2022-10-25 #16

    Neue Updates von Red Hat aufgenommen

13. 2022-10-18 #15

    Neue Updates aufgenommen

14. 2022-10-12 #14

    Neue Updates aufgenommen

15. 2022-10-06 #13

    Neue Updates von SUSE aufgenommen

16. 2022-09-21 #12

    Neue Updates von Oracle Linux aufgenommen

17. 2022-09-20 #11

    Neue Updates von Red Hat aufgenommen

18. 2022-09-14 #10

    Neue Updates von Red Hat aufgenommen

19. 2022-09-01 #9

    Neue Updates von Red Hat aufgenommen

20. 2022-07-20 #8

    Neue Updates von Amazon aufgenommen

21. 2022-06-21 #7

    Neue Updates von Ubuntu aufgenommen

22. 2022-06-07 #6

    Neue Updates von SUSE aufgenommen

23. 2022-05-05 #5

    Neue Updates von Ubuntu aufgenommen

24. 2022-05-04 #4

    Neue Updates von Ubuntu aufgenommen

25. 2022-05-03 #3

    Neue Updates von Ubuntu aufgenommen

References

• Oracle Critical Patch Update April 2022 - Appendix Oracle MySQL vom 2022-04-19
  https://www.oracle.com/security-alerts/cpuapr2022.html#AppendixMSQL
• NetApp Security Advisory NTAP-20220429-0005 vom 2022-04-29
  https://security.netapp.com/advisory/ntap-20220429-0005/
• Ubuntu Security Notice USN-5400-1 vom 2022-05-03
  https://ubuntu.com/security/notices/USN-5400-1
• Ubuntu Security Notice USN-5400-2 vom 2022-05-04
  https://ubuntu.com/security/notices/USN-5400-2
• Ubuntu Security Notice USN-5400-3 vom 2022-05-05
  https://ubuntu.com/security/notices/USN-5400-3
• SUSE Security Update SUSE-SU-2022:2003-1 vom 2022-06-07
  https://lists.suse.com/pipermail/sle-security-updates/2022-June/011247.html
• Ubuntu Security Notice USN-5490-1 vom 2022-06-21
  https://ubuntu.com/security/notices/USN-5490-1
• Amazon Linux Security Advisory ALAS-2022-098 vom 2022-07-21
  https://alas.aws.amazon.com/AL2022/ALAS-2022-098.html
• Red Hat Security Advisory RHSA-2022:6306 vom 2022-09-01
  https://access.redhat.com/errata/RHSA-2022:6306
• Red Hat Security Advisory RHSA-2022:6518 vom 2022-09-14
  https://access.redhat.com/errata/RHSA-2022:6518
• Red Hat Security Advisory RHSA-2022:6590 vom 2022-09-21
  https://access.redhat.com/errata/RHSA-2022:6590
• Oracle Linux Security Advisory ELSA-2022-6590 vom 2022-09-22
  https://linux.oracle.com/errata/ELSA-2022-6590.html
• SUSE Security Update SUSE-SU-2022:1040-3 vom 2022-10-06
  https://lists.suse.com/pipermail/sle-security-updates/2022-October/012505.html
• Juniper Security Bulletin
  https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release
• Oracle Linux Bulletin-October 2022 vom 2022-10-18
  https://www.oracle.com/security-alerts/linuxbulletinoct2022.html
• Red Hat Security Advisory RHSA-2022:7119 vom 2022-10-25
  https://access.redhat.com/errata/RHSA-2022:7119
• Oracle Linux Security Advisory ELSA-2022-7119 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-7119.html
• Amazon Linux Security Advisory ALAS-2022-165 vom 2022-11-04
  https://alas.aws.amazon.com/AL2022/ALAS-2022-165.html
• Red Hat Security Advisory RHSA-2022:7464 vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7464
• Red Hat Security Advisory RHSA-2022:7970 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:7970
• Oracle Linux Security Advisory ELSA-2022-7970 vom 2022-11-22
  https://linux.oracle.com/errata/ELSA-2022-7970.html
• Red Hat Security Advisory RHSA-2022:8860 vom 2022-12-08
  https://access.redhat.com/errata/RHSA-2022:8860
• Red Hat Security Advisory RHSA-2022:8847 vom 2022-12-08
  https://access.redhat.com/errata/RHSA-2022:8847
• Red Hat Security Advisory RHSA-2022:8893 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:8893
• Amazon Linux Security Advisory ALAS-2023-1931 vom 2023-02-06
  https://alas.aws.amazon.com/AL2/ALAS-2023-1931.html
• Amazon Linux Security Advisory ALAS-2023-1676 vom 2023-02-06
  https://alas.aws.amazon.com/ALAS-2023-1676.html
• Amazon Linux Security Advisory ALAS2-2023-1948 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1948.html
• Red Hat Security Advisory RHSA-2024:3433 vom 2024-05-28
  https://access.redhat.com/errata/RHSA-2024:3433
• Deell Security Update
  https://www.dell.com/support/kbdoc/en-us/000281732/dsa-2025-075-security-update-for-dell-data-protection-advisor-for-multiple-component-vulnerabilities