Oracle MySQL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 31

• High 8.8
  CVE-2025-15467 Public exploit EPSS 75%

  Stack buffer overflow in CMS (Auth)EnvelopedData parsing

  Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote c…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 27, 2026
• Medium 6.5
  CVE-2026-22009 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 6.5
  CVE-2026-22017 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 6.5
  CVE-2026-34270

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 6.5
  CVE-2026-34271

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 6.5
  CVE-2026-34272

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 21, 2026
• Medium 6.5
  CVE-2026-34276

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 6.5
  CVE-2026-34303

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux
  Apr 21, 2026
• Medium 6.5
  CVE-2026-34308 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affect…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 6.3
  CVE-2025-14017

  broken TLS options for threaded LDAPS

  When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jan 8, 2026
• Medium 5.8
  CVE-2026-34318

  Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are a…

  Oracle MySQL Shell percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 21, 2026
• Medium 5.4
  CVE-2025-5318

  Libssh: out-of-bounds read in sftp_handle()

  A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 24, 2025
• Medium 5.0
  CVE-2026-34317

  Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are a…

  Oracle MySQL Shell percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 21, 2026
• Medium 5.0
  CVE-2026-34319

  Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are a…

  Oracle MySQL Shell percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 21, 2026
• Medium 4.9
  CVE-2026-21998

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-22002 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-22004 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-22005 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-34267

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-34278

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-34293

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-34304

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-35234

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 21, 2026
• Medium 4.9
  CVE-2026-35235

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 21, 2026
• Medium 4.9
  CVE-2026-35236

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-35237

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-35238

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-35239

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.9
  CVE-2026-35240

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Medium 4.3
  CVE-2026-22015 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026
• Low 2.7
  CVE-2026-22001 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 21, 2026

Revision history

1. 2026-11-10 #15

   Neue Updates von IBM aufgenommen

2. 2026-07-27 #14

   Neue Updates von Oracle Linux aufgenommen

3. 2026-06-28 #13

   Neue Updates von Oracle Linux aufgenommen

4. 2026-06-25 #12

   Neue Updates von Oracle Linux aufgenommen

5. 2026-06-24 #11

   Neue Updates von Oracle Linux aufgenommen

6. 2026-06-23 #10

   Neue Updates von Oracle Linux aufgenommen

7. 2026-06-16 #9

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

8. 2026-06-15 #8

   Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen

9. 2026-06-14 #7

   Neue Updates von Red Hat aufgenommen

10. 2026-06-11 #6

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

11. 2026-06-10 #5

    Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

12. 2026-06-04 #4

    Neue Updates von Red Hat, Rocky Enterprise Software Foundation und Ubuntu aufgenommen

13. 2026-06-02 #3

    Neue Updates von Ubuntu aufgenommen

14. 2026-05-26 #2

    Neue Updates von Red Hat aufgenommen

15. 2026-04-21 #1

    Initiale Fassung

References

• Oracle Critical Patch Update Advisory - April 2026 - Appendix Oracle MySQL vom 2026-04-21
  https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixMSQL
• Red Hat Security Advisory RHSA-2026:20693 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20693
• Ubuntu Security Notice USN-8363-1 vom 2026-06-02
  https://ubuntu.com/security/notices/USN-8363-1
• Red Hat Security Advisory RHSA-2026:23332 vom 2026-06-04
  https://access.redhat.com/errata/RHSA-2026:23332
• Rocky Linux Security Advisory RLSA-2026:20693 vom 2026-06-04
  https://errata.build.resf.org/RLSA-2026:20693
• Ubuntu Security Notice USN-8363-2 vom 2026-06-03
  https://ubuntu.com/security/notices/USN-8363-2
• Red Hat Security Advisory RHSA-2026:25052 vom 2026-06-10
  https://access.redhat.com/errata/RHSA-2026:25052
• Rocky Linux Security Advisory RLSA-2026:25052 vom 2026-06-10
  https://errata.build.resf.org/RLSA-2026:25052
• Rocky Linux Security Advisory RLSA-2026:23332 vom 2026-06-11
  https://errata.build.resf.org/RLSA-2026:23332
• Red Hat Security Advisory RHSA-2026:25919 vom 2026-06-15
  https://access.redhat.com/errata/RHSA-2026:25919
• Rocky Linux Security Advisory RLSA-2026:25919 vom 2026-06-15
  https://errata.build.resf.org/RLSA-2026:25919
• Red Hat Security Advisory RHSA-2026:26180 vom 2026-06-16
  https://access.redhat.com/errata/RHSA-2026:26180
• Rocky Linux Security Advisory RLSA-2026:26180 vom 2026-06-17
  https://errata.build.resf.org/RLSA-2026:26180
• Oracle Linux Security Advisory ELSA-2026-26180 vom 2026-06-24
  https://linux.oracle.com/errata/ELSA-2026-26180.html
• Oracle Linux Security Advisory ELSA-2026-26180 vom 2026-06-24
  http://linux.oracle.com/errata/ELSA-2026-26180.html
• Oracle Linux Security Advisory ELSA-2026-25919 vom 2026-06-25
  https://linux.oracle.com/errata/ELSA-2026-25919.html
• Oracle Linux Security Advisory ELSA-2026-25052 vom 2026-06-26
  https://linux.oracle.com/errata/ELSA-2026-25052.html
• Oracle Linux Security Advisory ELSA-2026-23332 vom 2026-06-27
  https://linux.oracle.com/errata/ELSA-2026-23332.html
• Oracle Linux Security Advisory ELSA-2026-20693 vom 2026-07-28
  https://oss.oracle.com/pipermail/el-errata/2026-July/021289.html
• IBM Security Bulletin 7296252 vom 2026-11-11
  https://www.ibm.com/support/pages/node/7296252