High WID-SEC-2022-1776 32 CVEs

Oracle MySQL: Mehrere Schwachstellen

Published Oct 18, 2022 · Updated Jun 28, 2026 · Revision 21 · de-DE

Vendor: amazon Vendor: Dell Vendor: gentoo Vendor: IBM Vendor: NETAPP Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: ActiveIQ Unified Manager Product: Data Protection Advisor Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: MySQL Product: Rocky Linux Product: Tivoli Business Service Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

MySQL ist ein Open Source Datenbankserver von Oracle.

Vulnerabilities 32

Critical 9.8

CVE-2022-32207 EPSS 12%

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the…

curl curl curl curl Debian Ubuntu Azure Linux Alpine

Jul 7, 2022
High 7.5

CVE-2022-2097 Public exploit

AES OCB fails to encrypt some bytes

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the…

OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io

Jul 5, 2022
High 7.5

CVE-2022-31129

Inefficient Regular Expression Complexity in moment

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 par…

moment moment mediawiki wordpress Debian Ubuntu npm NuGet

Jul 6, 2022
High 7.5

CVE-2022-35737 Public exploit EPSS 24%

`libsqlite3-sys` via C SQLite improperly validates array index

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

qt5-qtwebengine sqlite3 sqlite3 sqlite Debian Ubuntu Azure Linux Alpine crates.io

Aug 3, 2022
High 7.2

CVE-2022-21600

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Oct 18, 2022
Medium 6.5

CVE-2022-21635

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 6.5

CVE-2022-39408

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 6.5

CVE-2022-39410

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 6.1

CVE-2022-34305 Scanner template

XSS in examples web application

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.

Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven

Jun 23, 2022
Medium 4.9

CVE-2022-21594

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21599

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21604

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21605

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Oct 18, 2022
Medium 4.9

CVE-2022-21607

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Oct 18, 2022
Medium 4.9

CVE-2022-21608

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21617

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21632

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21633

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21637

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21638

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21640

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-21641

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.9

CVE-2022-39400

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.4

CVE-2022-21595

Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Oct 18, 2022
Medium 4.4

CVE-2022-21625

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.3

CVE-2022-21589

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Oct 18, 2022
Medium 4.3

CVE-2022-21592

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.3

CVE-2022-39402

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 4.2

CVE-2022-39404

Vulnerability in the MySQL Installer product of Oracle MySQL (component: Installer: General). Supported versions that a…

Oracle MySQL Installer

Oct 18, 2022
Medium 4.1

CVE-2022-21611

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Low 3.9

CVE-2022-39403

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Unscored —

CVE-2022-29824

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for …

libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

May 3, 2022

Revision history

2026-06-28 #21
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
2026-01-25 #20
Neue Updates von Dell aufgenommen
2024-01-25 #19
Neue Updates von Red Hat aufgenommen
2023-05-25 #18
Neue Updates von Oracle Linux aufgenommen
2023-05-18 #17
Neue Updates von Oracle Linux aufgenommen
2023-05-16 #16
Neue Updates von Red Hat aufgenommen
2023-05-09 #15
Neue Updates von Red Hat aufgenommen
2023-03-07 #14
Neue Updates von Red Hat aufgenommen
2023-03-06 #13
Neue Updates von SUSE aufgenommen
2023-02-07 #12
Referenz(en) aufgenommen: FEDORA-2023-D332F0B6A3
2023-01-23 #11
Neue Updates von Amazon und Red Hat aufgenommen
2023-01-12 #10
Neue Updates von Oracle Linux aufgenommen
2023-01-11 #9
Neue Updates von Red Hat aufgenommen
2022-11-09 #8
Neue Updates von IBM aufgenommen
2022-11-07 #7
Neue Updates von Ubuntu aufgenommen
2022-11-02 #6
Neue Updates von SUSE aufgenommen
2022-10-31 #5
Neue Updates von Gentoo aufgenommen
2022-10-30 #4
Neue Updates von NetApp aufgenommen
2022-10-26 #3
Neue Updates von Ubuntu aufgenommen
2022-10-24 #2
Neue Updates von Ubuntu aufgenommen
2022-10-18 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - October 2022 - Appendix Oracle MySQL vom 2022-10-18
https://www.oracle.com/security-alerts/cpuoct2022.html#AppendixMSQL
Ubuntu Security Notice USN-5696-1 vom 2022-10-24
https://www.cybersecurity-help.cz/vdb/SB2022102425
Ubuntu Security Notice USN-5696-1 vom 2022-10-24
https://ubuntu.com/security/notices/USN-5696-1
Ubuntu Security Notice USN-5696-2 vom 2022-10-26
https://ubuntu.com/security/notices/USN-5696-2
NetApp Security Advisory NTAP-20221028-0013 vom 2022-10-28
https://security.netapp.com/advisory/ntap-20221028-0013/
Gentoo Linux Security Advisory GLSA-202210-40 vom 2022-10-31
https://security.gentoo.org/glsa/202210-40
SUSE Security Update SUSE-SU-2022:3307-2 vom 2022-11-02
https://lists.suse.com/pipermail/sle-security-updates/2022-November/012802.html
Ubuntu Security Notice USN-5712-1 vom 2022-11-07
https://ubuntu.com/security/notices/USN-5716-1
IBM Security Bulletin 6838215 vom 2022-11-10
https://www.ibm.com/blogs/psirt/security-bulletin-hsqldb-2-0-0-jar-shipped-with-ibm-tivoli-business-service-manager-is-vulnerable-to-remote-code-execution-cve-2022-41853/
Red Hat Security Advisory RHSA-2023:0110 vom 2023-01-12
https://access.redhat.com/errata/RHSA-2023:0110
Oracle Linux Security Advisory ELSA-2023-0110 vom 2023-01-12
http://linux.oracle.com/errata/ELSA-2023-0110.html
Amazon Linux Security Advisory ALAS2-2023-1911 vom 2023-01-23
https://alas.aws.amazon.com/AL2/ALAS-2023-1911.html
Red Hat Security Advisory RHSA-2023:0339 vom 2023-01-23
https://access.redhat.com/errata/RHSA-2023:0339
SUSE Security Update SUSE-SU-2023:0631-1 vom 2023-03-06
https://lists.suse.com/pipermail/sle-security-updates/2023-March/013977.html
Red Hat Security Advisory RHSA-2023:1102 vom 2023-03-07
https://access.redhat.com/errata/RHSA-2023:1102
Red Hat Security Advisory RHSA-2024:0425 vom 2024-01-25
https://access.redhat.com/errata/RHSA-2024:0425
Red Hat Security Advisory RHSA-2023:2621 vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2621
Red Hat Security Advisory RHSA-2023:3087 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:3087
Oracle Linux Security Advisory ELSA-2023-2621 vom 2023-05-18
https://oss.oracle.com/pipermail/el-errata/2023-May/013976.html
Oracle Linux Security Advisory ELSA-2023-3087 vom 2023-05-25
https://linux.oracle.com/errata/ELSA-2023-3087.html
Deell Security Update
https://www.dell.com/support/kbdoc/en-us/000281732/dsa-2025-075-security-update-for-dell-data-protection-advisor-for-multiple-component-vulnerabilities
Rocky Linux Security Advisory RLSA-2023:3087 vom 2026-06-28
https://errata.build.resf.org/RLSA-2023:3087