Oracle MySQL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 30

• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• High 7.5
  CVE-2024-21090

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that ar…

  Oracle MySQL Connectors mysql-connector-python Ubuntu
  Apr 16, 2024
• Medium 6.5
  CVE-2023-6129

  POLY1305 MAC implementation corrupts vector registers on PowerPC

  Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker ca…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 9, 2024
• Medium 5.5
  CVE-2024-21015

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 5.3
  CVE-2024-0853

  OCSP verification bypass with TLS session reuse

  curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (*OCSP stapling*) test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the ve…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 3, 2024
• Medium 5.3
  CVE-2024-20994

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-20993

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-20998

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21009

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21047

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21049

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21050

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21051

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21052

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21053

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21054

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21055

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21056

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21057

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21060

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21061

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21062

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21069

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21087

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21096

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux Alpine
  Apr 16, 2024
• Medium 4.9
  CVE-2024-21102

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that …

  Oracle MySQL Server MySQL NDB Cluster percona-server-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.4
  CVE-2024-21008

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Medium 4.4
  CVE-2024-21013

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Low 3.8
  CVE-2024-21000

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 16, 2024
• Low 2.2
  CVE-2024-21101

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL NDB Cluster
  Apr 16, 2024

Revision history

1. 2025-10-27 #18

   Neue Updates von IBM aufgenommen

2. 2025-09-04 #17

   Neue Updates von Amazon aufgenommen

3. 2025-02-13 #16

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

4. 2025-02-05 #15

   Neue Updates von Oracle Linux aufgenommen

5. 2025-02-03 #14

   Neue Updates von Red Hat aufgenommen

6. 2025-01-29 #13

   Neue Updates von Oracle Linux aufgenommen

7. 2025-01-27 #12

   Neue Updates von Red Hat aufgenommen

8. 2024-11-21 #11

   Neue Updates von XEROX aufgenommen

9. 2024-09-17 #10

   Neue Updates von Debian aufgenommen

10. 2024-08-26 #9

    Neue Updates von SUSE aufgenommen

11. 2024-07-22 #8

    Neue Updates von Amazon aufgenommen

12. 2024-06-18 #7

    Neue Updates von Ubuntu aufgenommen

13. 2024-06-16 #6

    Neue Updates von SUSE aufgenommen

14. 2024-06-11 #5

    Neue Updates von SUSE und Ubuntu aufgenommen

15. 2024-06-09 #4

    Neue Updates von Fedora aufgenommen

16. 2024-05-16 #3

    Neue Updates aufgenommen

17. 2024-05-01 #2

    Neue Updates von Red Hat aufgenommen

18. 2024-04-16 #1

    Initiale Fassung

References

• Oracle Critical Patch Update Advisory - April 2024 - Appendix Oracle MySQL vom 2024-04-16
  https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixMSQL
• Red Hat Security Advisory RHSA-2024:2619 vom 2024-04-30
  https://access.redhat.com/errata/RHSA-2024:2619
• MariaDB 10.11.8 Release Notes vom 2024-05-17
  https://mariadb.com/kb/en/mariadb-10-11-8-release-notes/
• MariaDB 10.5.25 Release Notes vom 2024-05-17
  https://mariadb.com/kb/en/mariadb-10-5-25-release-notes/
• MariaDB 10.6.18 Release Notes vom 2024-05-17
  https://mariadb.com/kb/en/mariadb-10-6-18-release-notes/
• MariaDB 11.2.4 Release Notes vom 2024-05-17
  https://mariadb.com/kb/en/mariadb-11-2-4-release-notes/
• Fedora Security Advisory FEDORA-2024-D61BFFD77F vom 2024-06-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-d61bffd77f
• Fedora Security Advisory FEDORA-2024-6EA93E629B vom 2024-06-07
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6ea93e629b
• SUSE Security Update SUSE-SU-2024:1985-1 vom 2024-06-11
  https://lists.suse.com/pipermail/sle-security-updates/2024-June/018698.html
• Ubuntu Security Notice USN-6823-1 vom 2024-06-11
  https://ubuntu.com/security/notices/USN-6823-1
• SUSE Security Update SUSE-SU-2024:2032-1 vom 2024-06-14
  https://lists.suse.com/pipermail/sle-security-updates/2024-June/018721.html
• Ubuntu Security Notice USN-6839-1 vom 2024-06-19
  https://ubuntu.com/security/notices/USN-6839-1
• Amazon Linux Security Advisory ALASMARIADB10.5-2024-006 vom 2024-07-23
  https://alas.aws.amazon.com/AL2/ALASMARIADB10.5-2024-006.html
• SUSE Security Update SUSE-SU-2024:3018-1 vom 2024-08-27
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019311.html
• Debian Security Advisory DLA-3891 vom 2024-09-18
  https://lists.debian.org/debian-lts-announce/2024/09/msg00034.html
• XEROX Security Advisory XRX24-017 vom 2024-11-21
  https://securitydocs.business.xerox.com/wp-content/uploads/2024/11/Xerox-Security-Bulletin-XRX24-017-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf
• Red Hat Security Advisory RHSA-2025:0739 vom 2025-01-28
  https://access.redhat.com/errata/RHSA-2025:0739
• Red Hat Security Advisory RHSA-2025:0737 vom 2025-01-28
  https://access.redhat.com/errata/RHSA-2025:0737
• Oracle Linux Security Advisory ELSA-2025-0737 vom 2025-01-29
  https://linux.oracle.com/errata/ELSA-2025-0737.html
• Oracle Linux Security Advisory ELSA-2025-0739 vom 2025-01-30
  https://linux.oracle.com/errata/ELSA-2025-0739.html
• Red Hat Security Advisory RHSA-2025:0912 vom 2025-02-04
  https://access.redhat.com/errata/RHSA-2025:0912
• Oracle Linux Security Advisory ELSA-2025-0912 vom 2025-02-05
  https://linux.oracle.com/errata/ELSA-2025-0912.html
• Oracle Linux Security Advisory ELSA-2025-0914 vom 2025-02-06
  https://linux.oracle.com/errata/ELSA-2025-0914.html
• Rocky Linux Security Advisory RLSA-2025:0739 vom 2025-02-13
  https://errata.build.resf.org/RLSA-2025:0739
• Rocky Linux Security Advisory RLSA-2025:0737 vom 2025-02-13
  https://errata.build.resf.org/RLSA-2025:0737
• Amazon Linux Security Advisory ALAS2POSTGRESQL13-2025-012 vom 2025-09-04
  https://alas.aws.amazon.com/AL2/ALAS2POSTGRESQL13-2025-012.html
• Amazon Linux Security Advisory ALAS2POSTGRESQL14-2025-019 vom 2025-09-04
  https://alas.aws.amazon.com/AL2/ALAS2POSTGRESQL14-2025-019.html
• IBM Security Bulletin 7249276 vom 2025-10-27
  https://www.ibm.com/support/pages/node/7249276