Oracle MySQL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 30

• Critical 9.8
  CVE-2022-37434 Public exploit EPSS 19%

  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

  openjpeg2 rsync fltk gdal Debian Ubuntu Azure Linux Alpine Wolfi
  Aug 5, 2022
• High 8.1
  CVE-2022-43548 EPSS 15%

  A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insuffi…

  Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine
  Dec 5, 2022
• High 7.5
  CVE-2022-43551 EPSS 17%

  A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS…

  curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine Wolfi
  Dec 23, 2022
• High 7.5
  CVE-2022-45143

  Apache Tomcat: JsonErrorReportValve escaping

  The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to s…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu Maven
  Jan 3, 2023
• High 7.5
  CVE-2023-0215

  Use-after-free following BIO_new_NDEF

  The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications.…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi crates.io
  Feb 8, 2023
• High 7.5
  CVE-2023-21912

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• High 7.1
  CVE-2023-21980

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are aff…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 18, 2023
• Medium 6.5
  CVE-2023-21946

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 6.1
  CVE-2022-31160 Public exploit

  jQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label

  jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a labe…

  jquery jquery-ui jquery-ui jquery-ui-rails Debian Ubuntu npm Maven NuGet RubyGems
  Jul 20, 2022
• Medium 5.5
  CVE-2023-21929

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 5.3
  CVE-2023-21971 Public exploit

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are aff…

  Oracle MySQL Connectors mysql-connector-java Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21911

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21913

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21917

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21919

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21920

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21933

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21935

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21945

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21953

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21955

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21962

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21966

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affect…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21972

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21976

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21977

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 18, 2023
• Medium 4.9
  CVE-2023-21982

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 18, 2023
• Medium 4.4
  CVE-2023-21940

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Medium 4.4
  CVE-2023-21947

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023
• Low 2.7
  CVE-2023-21963

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 18, 2023

Revision history

1. 2026-08-05 #18

   Neue Updates von NetApp aufgenommen

2. 2026-06-28 #17

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

3. 2024-05-01 #16

   Neue Updates von Red Hat aufgenommen

4. 2024-03-07 #15

   Neue Updates von Oracle Linux aufgenommen

5. 2024-03-05 #14

   Neue Updates von Red Hat aufgenommen

6. 2024-02-21 #13

   Neue Updates von Oracle Linux aufgenommen

7. 2024-02-20 #12

   Neue Updates von Red Hat aufgenommen

8. 2023-09-24 #11

   Neue Updates von IBM aufgenommen

9. 2023-07-25 #10

   Neue Updates von SUSE aufgenommen

10. 2023-06-15 #9

    Neue Updates von Amazon aufgenommen

11. 2023-05-25 #8

    Neue Updates von Oracle Linux aufgenommen

12. 2023-05-18 #7

    Neue Updates von SUSE und Oracle Linux aufgenommen

13. 2023-05-16 #6

    Neue Updates von Red Hat aufgenommen

14. 2023-05-15 #5

    Neue Updates von Ubuntu aufgenommen

15. 2023-05-09 #4

    Neue Updates von Tenable und Red Hat aufgenommen

16. 2023-05-08 #3

    Neue Updates von Ubuntu aufgenommen

17. 2023-05-04 #2

    Neue Updates von F5 aufgenommen

18. 2023-04-18 #1

    Initiale Fassung

References

• Oracle Critical Patch Update Advisory - April 2023 - Appendix Oracle MySQL vom 2023-04-18
  https://www.oracle.com/security-alerts/cpuapr2023.html#AppendixMSQL
• F5 Security Advisory K000134469 vom 2023-05-04
  https://my.f5.com/manage/s/article/K000134469
• Ubuntu Security Notice USN-6060-2 vom 2023-05-08
  https://ubuntu.com/security/notices/USN-6060-2
• Ubuntu Security Notice USN-6060-1 vom 2023-05-08
  https://ubuntu.com/security/notices/USN-6060-1
• Tenable Security Advisory TNS-2023-19 vom 2023-05-10
  https://www.tenable.com/security/tns-2023-19
• Red Hat Security Advisory RHSA-2023:2621 vom 2023-05-09
  https://access.redhat.com/errata/RHSA-2023:2621
• Ubuntu Security Notice USN-6060-3 vom 2023-05-15
  https://ubuntu.com/security/notices/USN-6060-3
• Red Hat Security Advisory RHSA-2023:3087 vom 2023-05-16
  https://access.redhat.com/errata/RHSA-2023:3087
• SUSE Security Update SUSE-SU-2023:2241-1 vom 2023-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014924.html
• Oracle Linux Security Advisory ELSA-2023-2621 vom 2023-05-18
  https://oss.oracle.com/pipermail/el-errata/2023-May/013976.html
• Oracle Linux Security Advisory ELSA-2023-3087 vom 2023-05-25
  https://linux.oracle.com/errata/ELSA-2023-3087.html
• Amazon Linux Security Advisory ALAS-2023-1768 vom 2023-06-16
  https://alas.aws.amazon.com/ALAS-2023-1768.html
• SUSE Security Update SUSE-SU-2023:2979-1 vom 2023-07-26
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015640.html
• IBM Security Bulletin 7038022 vom 2023-09-22
  https://www.ibm.com/support/pages/node/7038022
• Red Hat Security Advisory RHSA-2024:0894 vom 2024-02-20
  https://access.redhat.com/errata/RHSA-2024:0894
• Oracle Linux Security Advisory ELSA-2024-0894 vom 2024-02-22
  https://linux.oracle.com/errata/ELSA-2024-0894.html
• Red Hat Security Advisory RHSA-2024:1141 vom 2024-03-06
  https://access.redhat.com/errata/RHSA-2024:1141
• Oracle Linux Security Advisory ELSA-2024-1141 vom 2024-03-07
  http://linux.oracle.com/errata/ELSA-2024-1141.html
• Red Hat Security Advisory RHSA-2024:2619 vom 2024-04-30
  https://access.redhat.com/errata/RHSA-2024:2619
• Rocky Linux Security Advisory RLSA-2023:3087 vom 2026-06-28
  https://errata.build.resf.org/RLSA-2023:3087
• NetApp Security Advisory NTAP-20230427-0010 vom 2026-08-06
  https://security.netapp.com/advisory/NTAP-20230427-0010