- Description
- Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster and unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).
- Source
- secalert_us@oracle.com
- NVD status
- Analyzed
- Products
- mysql_server, mysql_cluster
CVSS 3.1
- Type
- Secondary
- Base score
- 8.2
- Impact score
- 4.2
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-200
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "20500A3C-1C84-4B5D-B46A-B74DF54640BD",
"versionEndIncluding": "8.4.10",
"versionStartIncluding": "8.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:mysql_server:9.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A65991A5-C5F6-4C62-AF5A-BE5C0370EF7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:mysql_server:9.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "CC5CA0F1-FEF9-4DA8-B867-E9EF20A58512",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AD39D6D1-36B9-403D-A8BD-3480AE92E9E7",
"versionEndIncluding": "8.0.47",
"versionStartIncluding": "8.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E6FD5365-6FD2-412C-B844-F0D29A9DD757",
"versionEndIncluding": "8.4.10",
"versionStartIncluding": "8.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:mysql_cluster:9.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D804257D-F6E5-462B-AF71-48738704F36A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:mysql_cluster:9.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A9B75B87-48CD-4224-A585-E4D75492C5DB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]