High WID-SEC-2023-0126 36 CVEs

Oracle MySQL: Mehrere Schwachstellen

Published Jan 17, 2023 · Updated Jun 28, 2026 · Revision 16 · de-DE

Vendor: amazon Vendor: Dell Vendor: gentoo Vendor: IBM Vendor: NETAPP Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: Ubuntu Product: ActiveIQ Unified Manager Product: Data Protection Advisor Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: MySQL Product: Rocky Linux Product: Security Guardium Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

MySQL ist ein Open Source Datenbankserver von Oracle.

Vulnerabilities 36

Critical 9.8

CVE-2022-31692 Public exploit

Spring Security authorization rules can be bypassed via forward or include dispatcher types

Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expe…

libspring-java org.springframework.security:spring-security-core Ubuntu Maven

Oct 31, 2022
Critical 9.8

CVE-2022-32221

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data …

curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine Wolfi

Dec 5, 2022
Critical 9.8

CVE-2022-37434 Public exploit EPSS 19%

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

openjpeg2 rsync fltk gdal Debian Ubuntu Azure Linux Alpine Wolfi

Aug 5, 2022
Critical 9.1

CVE-2020-36242

PyCA Cryptography symmetrically encrypting large values can lead to integer overflow

In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

cryptography python-cryptography py3-cryptography Debian Alpine PyPI

Feb 7, 2021
High 7.8

CVE-2022-40304

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, …

libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Nov 23, 2022
High 7.5

CVE-2022-1941

Out of Memory issue in ProtocolBuffers for cpp and python

A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 fo…

Google protobuf-cpp protobuf-python mysql Debian Ubuntu Azure Linux PyPI

Sep 22, 2022
High 7.5

CVE-2022-42252

Apache Tomcat request smuggling via malformed content-length

If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing a…

Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven

Nov 1, 2022
Medium 6.5

CVE-2022-22971 Public exploit

Allocation of Resources Without Limits or Throttling in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.

libspring-java libspring-java jenkins org.springframework:spring-messaging Debian Ubuntu Alpine Maven

May 12, 2022
Medium 6.5

CVE-2023-21868

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 6.3

CVE-2023-21860

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations). Supported version…

Oracle MySQL Cluster

Jan 18, 2023
Medium 6.2

CVE-2020-10735

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text")…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Wolfi

Sep 9, 2022
Medium 5.9

CVE-2023-21875

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 5.5

CVE-2023-21869

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 5.5

CVE-2023-21872

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 5.5

CVE-2023-21877

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 5.5

CVE-2023-21880

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 4.9

CVE-2023-21836

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21840

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21863

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21864

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21865

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21866

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21867

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21870

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21871

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21873

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Medium 4.9

CVE-2023-21876

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 4.9

CVE-2023-21878

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 4.9

CVE-2023-21879

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 4.9

CVE-2023-21881

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 4.9

CVE-2023-21883

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 4.9

CVE-2023-21887 Public exploit EPSS 43%

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Medium 4.3

CVE-2022-3171

Memory handling vulnerability in ProtocolBuffers Java core and lite

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields …

Google Protocolbuffers druid trino Debian Ubuntu Wolfi Maven RubyGems

Oct 12, 2022
Low 2.7

CVE-2023-21874

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 17, 2023
Low 2.7

CVE-2023-21882

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 17, 2023
Unscored —

CVE-2022-24407

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDAT…

cyrus-sasl2 cyrus-sasl cyrus-sasl cyrus-sasl2 Debian Ubuntu Azure Linux Alpine

Feb 23, 2022

Revision history

2026-06-28 #16
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
2026-01-25 #15
Neue Updates von Dell aufgenommen
2025-05-13 #14
Neue Updates von Red Hat aufgenommen
2024-08-11 #13
Neue Updates von Gentoo aufgenommen
2023-05-30 #12
Neue Updates von IBM aufgenommen
2023-05-25 #11
Neue Updates von Oracle Linux aufgenommen
2023-05-18 #10
Neue Updates von Oracle Linux aufgenommen
2023-05-16 #9
Neue Updates von Red Hat aufgenommen
2023-05-09 #8
Neue Updates von Red Hat aufgenommen
2023-03-06 #7
Neue Updates von Amazon aufgenommen
2023-02-22 #6
Neue Updates von Amazon aufgenommen
2023-02-08 #5
Neue Updates von NetApp aufgenommen
2023-02-07 #4
Referenz(en) aufgenommen: FEDORA-2023-E449235964, FEDORA-2023-D332F0B6A3
2023-01-29 #3
Neue Updates von Ubuntu aufgenommen
2023-01-24 #2
Neue Updates von Ubuntu aufgenommen
2023-01-17 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - January 2023 - Appendix Oracle MySQL vom 2023-01-17
https://www.oracle.com/security-alerts/cpujan2023.html#AppendixMSQL
Ubuntu Security Notice USN-5823-2 vom 2023-01-25
https://ubuntu.com/security/notices/USN-5823-2
Ubuntu Security Notice USN-5823-1 vom 2023-01-24
https://ubuntu.com/security/notices/USN-5823-1
Ubuntu Security Notice USN-5823-3 vom 2023-01-29
https://ubuntu.com/security/notices/USN-5823-3
NetApp Security Advisory NTAP-20230208-0002 vom 2023-02-08
https://security.netapp.com/advisory/ntap-20230208-0002/
Amazon Linux Security Advisory ALAS-2023-1686 vom 2023-02-23
https://alas.aws.amazon.com/ALAS-2023-1686.html
Amazon Linux Security Advisory ALAS2-2023-1973 vom 2023-03-07
https://alas.aws.amazon.com/AL2/ALAS-2023-1973.html
Red Hat Security Advisory RHSA-2023:2621 vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2621
Red Hat Security Advisory RHSA-2023:3087 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:3087
Oracle Linux Security Advisory ELSA-2023-2621 vom 2023-05-18
https://oss.oracle.com/pipermail/el-errata/2023-May/013976.html
Oracle Linux Security Advisory ELSA-2023-3087 vom 2023-05-25
https://linux.oracle.com/errata/ELSA-2023-3087.html
IBM Security Bulletin 6981105 vom 2023-05-30
https://www.ibm.com/support/pages/node/6981105
Gentoo Linux Security Advisory GLSA-202408-31 vom 2024-08-12
https://security.gentoo.org/glsa/202408-31
Red Hat Security Advisory RHSA-2025:7138 vom 2025-05-13
https://access.redhat.com/errata/RHSA-2025:7138
Deell Security Update
https://www.dell.com/support/kbdoc/en-us/000281732/dsa-2025-075-security-update-for-dell-data-protection-advisor-for-multiple-component-vulnerabilities
Rocky Linux Security Advisory RLSA-2023:3087 vom 2026-06-28
https://errata.build.resf.org/RLSA-2023:3087