High WID-SEC-2022-1696 31 CVEs

Oracle MySQL: Mehrere Schwachstellen

Published Jan 15, 2019 · Updated Oct 13, 2026 · Revision 19 · de-DE

Vendor: Juniper Networks Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Junos Space Product: Linux Product: Linux Product: Linux Product: MySQL Product: MySQL Enterprise Monitor Product: openSUSE Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL und Oracle MySQL Enterprise Monitor ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

Product

MySQL ist ein Open Source Datenbankserver von Oracle.
Der MySQL Enterprise Monitor überwacht kontinuierlich MySQL Anfragen und performanzrelevante Server Werte.

Vulnerabilities 31

Critical 9.1

CVE-2018-10933 Public exploit EPSS 92%

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client cou…

[UNKNOWN] libssh libssh libssh Debian Ubuntu Alpine

Oct 17, 2018
High 8.1

CVE-2019-2435

Improper Access Control in MySQL Connector Python

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network acce…

Oracle MySQL Connectors mysql-connector-python mysql-connector-python Ubuntu PyPI

Jan 16, 2019
Unscored —

CVE-2018-0732 EPSS 47%

Client DoS due to large DH parameter

During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a …

OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

Jun 12, 2018
Unscored —

CVE-2018-0734 EPSS 12%

Timing attack against DSA

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affec…

OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

Oct 30, 2018
Unscored —

CVE-2018-0737 EPSS 12%

Cache timing vulnerability in RSA Key Generation

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in Open…

OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

Apr 16, 2018
Unscored —

CVE-2018-5407 Public exploit

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…

openssl openssl openssl openssl1.0 Debian Ubuntu Alpine

Nov 15, 2018
Unscored —

CVE-2019-2420

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

Oracle MySQL Server mysql-5.7 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2434

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are…

Oracle MySQL Server mysql-5.7 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2436

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2455

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2481

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2482

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported versions that are aff…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2486

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

Oracle MySQL Server mysql-5.7 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2494

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2495

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2502

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2503

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported vers…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2507

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2510

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…

Oracle MySQL Server mysql-5.7 mariadb Ubuntu Alpine

Jan 16, 2019
Unscored —

CVE-2019-2513

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell). Supported versions that are affected…

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2528

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Supported versions that …

Oracle MySQL Server mysql-5.7 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2529

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Jan 16, 2019
Unscored —

CVE-2019-2530

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2531

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2532

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

Oracle MySQL Server mysql-5.7 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2533

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported v…

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2534

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2535

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that ar…

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2536

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

Oracle MySQL Server

Jan 16, 2019
Unscored —

CVE-2019-2537

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Jan 16, 2019
Unscored —

CVE-2019-2539

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that…

Oracle MySQL Server

Jan 16, 2019

Revision history

2026-10-13 #19
Neue Updates von openSUSE aufgenommen
2022-10-12 #18
Neue Updates aufgenommen
2019-11-05 #17
Neue Updates von Red Hat aufgenommen
2019-08-19 #16
Neue Updates von Oracle Linux aufgenommen
2019-08-18 #15
Referenz(en) aufgenommen: GLSA201908-24
2019-08-15 #14
Neue Updates von Red Hat aufgenommen
2019-08-13 #13
Neue Updates von SUSE und Red Hat aufgenommen
2019-08-06 #12
Neue Updates von Red Hat aufgenommen
2019-06-06 #11
Neue Updates von SUSE aufgenommen
2019-05-21 #10
Referenz(en) aufgenommen: RHSA-2019:1258
2019-05-06 #9
Neue Updates von SUSE aufgenommen
2019-03-13 #8
Neue Updates von SUSE aufgenommen
2019-03-06 #7
Neue Updates von SUSE aufgenommen
2019-02-18 #6
Referenz(en) aufgenommen: FEDORA-2019-21B76D179E
2019-02-17 #5
Neue Updates von Arch Linux aufgenommen
2019-01-30 #4
Neue Updates von Fedora aufgenommen
2019-01-23 #3
Neue Updates von Ubuntu aufgenommen
2019-01-20 #2
Neue Updates von NetApp aufgenommen
2019-01-15 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - January 2019 vom 2019-01-15
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html#AppendixMSQL
NetApp Security Advisory NTAP-20190118-0002 vom 2019-01-18
https://security.netapp.com/advisory/ntap-20190118-0002/
Ubuntu Security Notice USN-3867-1 vom 2019-01-23
https://usn.ubuntu.com/3867-1/
Fedora Security Advisory FEDORA-2019-614F1CD5A8 vom 2019-01-31
https://bodhi.fedoraproject.org/updates/FEDORA-2019-614f1cd5a8
Arch Linux Security Advisory ASA-201902-21 vom 2019-02-17
https://security.archlinux.org/ASA-201902-21
SUSE Security Update SUSE-SU-2019:0555-1 vom 2019-03-06
https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html
SUSE Security Update SUSE-SU-2019:0609-1 vom 2019-03-14
https://www.suse.com/support/update/announcement/2019/suse-su-20190609-1.html
SUSE Security Update SUSE-SU-2019:1162-1 vom 2019-05-07
https://www.suse.com/support/update/announcement/2019/suse-su-20191162-1.html
SUSE Security Update SUSE-SU-2019:1441-1 vom 2019-06-07
https://www.suse.com/support/update/announcement/2019/suse-su-20191441-1.html
Red Hat Security Advisory RHSA-2019:2327 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2327
SUSE Security Update SUSE-SU-2019:2118-1 vom 2019-08-13
https://www.suse.com/support/update/announcement/2019/suse-su-20192118-1.html
Red Hat Security Advisory RHSA-2019:2484 vom 2019-08-14
https://access.redhat.com/errata/RHSA-2019:2484
Red Hat Security Advisory RHSA-2019:2511 vom 2019-08-16
https://access.redhat.com/errata/RHSA-2019:2511
Oracle Linux Security Advisory ELSA-2019-2511 vom 2019-08-19
http://linux.oracle.com/errata/ELSA-2019-2511.html
Red Hat Security Advisory RHSA-2019:3708 vom 2019-11-05
https://access.redhat.com/errata/RHSA-2019:3708
Juniper Security Bulletin
https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release
openSUSE Security Update OPENSUSE-SU-2026:12019-1 vom 2026-10-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GX2CH4ZJMVFXIDA7ZIEE7RH4CTXPZ35V/