Skip to content
OpenAdvisories
Medium · 4.9 CVE-2023-21840 EUVD-2023-26006GHSA-jcp3-6qf5-qwcc

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.40 and prio…

Published Jan 17, 2023 · Updated Sep 17, 2024 · Assigned by oracle

Vendor: Oracle Product: MySQL Server Package: mysql-5.5 Package: mysql-5.7 Package: percona-server-5.6 Package: percona-xtradb-cluster-5.6 Ecosystem: Ubuntu

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.40 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected products

VendorProductAffectedFixed
Oracle MySQL Server 5.7.40 and prior —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS mysql-8.0 8.0.32-0buntu0.22.04.1 USN-5823-1
Ubuntu 20.04 LTS mysql-8.0 8.0.32-0buntu0.20.04.1 USN-5823-1
Ubuntu 18.04 LTS mysql-5.7 5.7.41-0ubuntu0.18.04.1 USN-5823-1
Ubuntu 16.04 LTS percona-server-5.6 +1 No fix yet —
Ubuntu 14.04 LTS mysql-5.5 No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS mysql-5.7 5.7.41-0ubuntu0.16.04.1+esm1 USN-5823-2

Advisories 5

References