ByteOS

>>postgresql>>Versions from 7.4(inclusive) to 7.4.19(exclusive)

>>postgresql>>Versions from 8.0(inclusive) to 8.0.15(exclusive)

>>postgresql>>Versions from 8.1(inclusive) to 8.1.11(exclusive)

>>postgresql>>Versions from 8.2(inclusive) to 8.2.6(exclusive)

cpe:2.3:a:tcl:tcl\/tk:*:*:*:*:*:*:*:*

TCL

>>tcl\/tk>>Versions before 8.4.17(exclusive)

Debian GNU/Linux

>>debian_linux>>3.1

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

>>ubuntu_linux>>6.06

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

>>ubuntu_linux>>6.10

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

>>ubuntu_linux>>7.04

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

>>ubuntu_linux>>7.10

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154	cve@mitre.org	Broken Link
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	cve@mitre.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html	cve@mitre.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html	cve@mitre.org	Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0122.html	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28359	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28376	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28437	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28438	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28454	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28455	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28464	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28477	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28479	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28679	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/28698	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29070	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29248	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29638	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/30535	cve@mitre.org	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200801-15.xml	cve@mitre.org	Third Party Advisory
http://securitytracker.com/id?1019157	cve@mitre.org	Third Party Advisory VDB Entry
http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894	cve@mitre.org	Third Party Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894	cve@mitre.org	Exploit Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1	cve@mitre.org	Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1	cve@mitre.org	Broken Link
http://www.debian.org/security/2008/dsa-1460	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2008/dsa-1463	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:004	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:059	cve@mitre.org	Third Party Advisory
http://www.postgresql.org/about/news.905	cve@mitre.org	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0038.html	cve@mitre.org	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0040.html	cve@mitre.org	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0134.html	cve@mitre.org	Third Party Advisory
http://www.securityfocus.com/archive/1/485864/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/486407/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/493080/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/27163	cve@mitre.org	Patch Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2008-0009.html	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0061	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0109	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/1071/references	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/1744	cve@mitre.org	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/39497	cve@mitre.org	Third Party Advisory VDB Entry
https://issues.rpath.com/browse/RPL-1768	cve@mitre.org	Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569	cve@mitre.org	Third Party Advisory
https://usn.ubuntu.com/568-1/	cve@mitre.org	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html	cve@mitre.org	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html	cve@mitre.org	Third Party Advisory

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-0122.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28359

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28376

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28437

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28438

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28454

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28455

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28464

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28477

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28479

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28679

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/28698

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29070

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29248

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29638

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/30535

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://security.gentoo.org/glsa/glsa-200801-15.xml

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://securitytracker.com/id?1019157

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894

Source: cve@mitre.org

Resource:

Exploit

Third Party Advisory

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.debian.org/security/2008/dsa-1460

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2008/dsa-1463

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2008:004

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2008:059

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.postgresql.org/about/news.905

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0038.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0040.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0134.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/archive/1/485864/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/archive/1/486407/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/archive/1/493080/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/27163

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

VDB Entry

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2008-0009.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/0061

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/0109

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/1071/references

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/1744

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/39497

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://issues.rpath.com/browse/RPL-1768

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/568-1/

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Similar CVEs

306Records found

CVE-2019-2966

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.63% / 69.44%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2946

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.91% / 74.80%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2020-8618

Matching Score-8

Matching Score-8

Vendor-NetApp, Inc.Canonical Ltd.Internet Systems Consortium, Inc.openSUSE

CVSS Score-4.9||MEDIUM

EPSS-1.73% / 81.68%

7 Day CHG~0.00%

Published-17 Jun, 2020 | 21:20

Updated-16 Sep, 2024 | 23:36

A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.

Product-ubuntu_linux bind leap steelstore_cloud_integrated_storage BIND9

CWE ID-CWE-617

Reachable Assertion

CVE-2019-2531

Matching Score-8

Assigner-Oracle

Product-ubuntu_linux software_collections enterprise_linux_server_aus enterprise_linux storage_automation_store enterprise_linux_eus oncommand_workflow_automation enterprise_linux_server_tus oncommand_unified_manager mysql snapcenter MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.13% / 32.67%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:03

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Red Hat, Inc.NetApp, Inc.Canonical Ltd.Oracle Corporation

CVE-2020-8622

Matching Score-8

Matching Score-8

Vendor-Canonical Ltd.Debian GNU/Linux openSUSE Synology, Inc.Internet Systems Consortium, Inc.NetApp, Inc.Fedora Project Oracle Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.34% / 56.35%

7 Day CHG~0.00%

Published-21 Aug, 2020 | 20:50

Updated-16 Sep, 2024 | 17:14

A truncated TSIG response can lead to an assertion failure

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.

Product-communications_diameter_signaling_router ubuntu_linux dns_server debian_linux fedora bind leap steelstore_cloud_integrated_storage BIND9

CWE ID-CWE-617

Reachable Assertion

CVE-2020-8619

Matching Score-8

Matching Score-8

Vendor-openSUSE Fedora Project NetApp, Inc.Canonical Ltd.Debian GNU/Linux Internet Systems Consortium, Inc.

CVSS Score-4.9||MEDIUM

EPSS-9.97% / 92.74%

7 Day CHG~0.00%

Published-17 Jun, 2020 | 21:20

Updated-17 Sep, 2024 | 03:28

A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.

Product-ubuntu_linux debian_linux fedora bind leap steelstore_cloud_integrated_storage BIND9

CWE ID-CWE-404

Improper Resource Shutdown or Release

CVE-2019-2957

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.44% / 62.38%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:28

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2015-2684

Matching Score-8

Assigner-Debian GNU/Linux

Matching Score-8

Assigner-Debian GNU/Linux

CVSS Score-4||MEDIUM

EPSS-0.46% / 62.94%

7 Day CHG~0.00%

Published-31 Mar, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.

Vendor-shibboleth n/a Debian GNU/Linux

Product-debian_linux service_provider n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2019-2627

Matching Score-8

Assigner-Oracle

Product-enterprise_linux_server ubuntu_linux mariadb enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_desktop mysql leap MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.14% / 34.72%

7 Day CHG~0.00%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:45

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Red Hat, Inc.openSUSE Oracle Corporation Canonical Ltd.

CVE-2019-2982

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.51% / 65.59%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2510

Matching Score-8

Assigner-Oracle

Product-snapcenter ubuntu_linux mariadb enterprise_linux_server_aus enterprise_linux active_iq_unified_manager enterprise_linux_eus oncommand_workflow_automation enterprise_linux_server_tus mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.16% / 37.41%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:05

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation NetApp, Inc.Red Hat, Inc.Oracle Corporation Canonical Ltd.

CVE-2019-2757

Matching Score-8

Assigner-Oracle

Product-ubuntu_linux software_collections enterprise_linux_server_aus enterprise_linux fedora enterprise_linux_eus enterprise_linux_server_tus mysql MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.67% / 70.39%

7 Day CHG~0.00%

Published-23 Jul, 2019 | 22:31

Updated-01 Oct, 2024 | 16:43

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Fedora Project Red Hat, Inc.Canonical Ltd.

CVE-2019-2963

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.51% / 65.59%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:27

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2968

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.51% / 65.59%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:27

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2592

Matching Score-8

Assigner-Oracle

Product-ubuntu_linux software_collections enterprise_linux_server_aus enterprise_linux fedora enterprise_linux_eus enterprise_linux_server_tus mysql MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.48% / 64.27%

7 Day CHG~0.00%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:47

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Fedora Project Red Hat, Inc.Canonical Ltd.

CVE-2019-2974

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.31% / 53.47%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Fedora Project openSUSE Oracle Corporation Canonical Ltd.

Product-ubuntu_linux mariadb fedora mysql leap MySQL Server

CVE-2019-2914

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.78% / 72.71%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2481

Matching Score-8

Assigner-Oracle

Product-ubuntu_linux snapcenter mariadb enterprise_linux_server_aus enterprise_linux enterprise_linux_eus oncommand_workflow_automation enterprise_linux_server_tus oncommand_unified_manager mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.09% / 27.28%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:09

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation NetApp, Inc.Red Hat, Inc.Oracle Corporation Canonical Ltd.

CVE-2019-2434

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.85% / 73.97%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:18

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-Red Hat, Inc.NetApp, Inc.Canonical Ltd.Oracle Corporation

CVE-2019-2805

Matching Score-8

Assigner-Oracle

Product-enterprise_linux_server ubuntu_linux mariadb enterprise_linux_server_aus enterprise_linux_workstation fedora enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_desktop mysql leap MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.43% / 61.80%

7 Day CHG~0.00%

Published-23 Jul, 2019 | 22:31

Updated-01 Oct, 2024 | 16:39

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Red Hat, Inc.Fedora Project openSUSE Oracle Corporation Canonical Ltd.

CVE-2019-2774

Matching Score-8

Assigner-Oracle

Product-ubuntu_linux software_collections enterprise_linux_server_aus enterprise_linux fedora enterprise_linux_eus enterprise_linux_server_tus mysql MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.67% / 70.39%

7 Day CHG~0.00%

Published-23 Jul, 2019 | 22:31

Updated-01 Oct, 2024 | 16:42

Vendor-Oracle Corporation Fedora Project Red Hat, Inc.Canonical Ltd.

CVE-2019-2420

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.48% / 64.27%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Red Hat, Inc.NetApp, Inc.Canonical Ltd.Oracle Corporation

CVE-2019-2529

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.39% / 58.93%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:03

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVE-2019-2455

Matching Score-8

Assigner-Oracle

Product-enterprise_linux_server ubuntu_linux snapcenter mariadb enterprise_linux_server_aus enterprise_linux_workstation active_iq_unified_manager enterprise_linux_eus oncommand_workflow_automation enterprise_linux_server_tus enterprise_linux_desktop mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.26% / 48.87%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:12

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation NetApp, Inc.Red Hat, Inc.Oracle Corporation Canonical Ltd.

CVE-2019-2537

Matching Score-8

Assigner-Oracle

Vendor-MariaDB Foundation Debian GNU/Linux NetApp, Inc.Red Hat, Inc.Oracle Corporation Canonical Ltd.

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.13% / 33.15%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 15:52

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Product-ubuntu_linux debian_linux mariadb enterprise_linux_server_aus enterprise_linux storage_automation_store enterprise_linux_eus oncommand_workflow_automation enterprise_linux_server_tus oncommand_unified_manager mysql snapcenter MySQL Server

CVE-2019-2737

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.18% / 39.28%

7 Day CHG~0.00%

Published-23 Jul, 2019 | 22:31

Updated-01 Oct, 2024 | 16:45

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Fedora Project openSUSE Oracle Corporation Canonical Ltd.

Product-ubuntu_linux mariadb fedora mysql leap MySQL Server

CVE-2019-2628

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.17% / 38.49%

7 Day CHG~0.00%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:44

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Red Hat, Inc.openSUSE Oracle Corporation Canonical Ltd.

Product-ubuntu_linux mariadb enterprise_linux_server_aus enterprise_linux enterprise_linux_eus enterprise_linux_server_tus mysql leap MySQL Server

CVE-2019-2967

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.91% / 74.80%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:27

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2532

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.31% / 53.42%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:03

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Red Hat, Inc.NetApp, Inc.Canonical Ltd.Oracle Corporation

CVE-2019-2950

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.61% / 81.03%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2960

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.51% / 65.59%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:28

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-2566

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.25% / 47.82%

7 Day CHG~0.00%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:49

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Canonical Ltd.

Product-ubuntu_linux mysql MySQL Server

CVE-2019-19344

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-1.75% / 81.78%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 00:00

Updated-14 Jan, 2025 | 19:29

There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.

Vendor-Canonical Ltd.openSUSE Samba Synology, Inc.Red Hat, Inc.

Product-leap diskstation_manager directory_server ubuntu_linux router_manager skynas samba samba

CWE ID-CWE-416

Use After Free

CVE-2017-10378

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.37% / 57.96%

7 Day CHG~0.00%

Published-19 Oct, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVE-2019-19269

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4.9||MEDIUM

EPSS-0.72% / 71.48%

7 Day CHG~0.00%

Published-26 Nov, 2019 | 03:34

Updated-05 Aug, 2024 | 02:09

An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.

Vendor-proftpd n/a Debian GNU/Linux Fedora Project

Product-debian_linux fedora proftpd n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-10384

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.47% / 63.68%

7 Day CHG~0.00%

Published-19 Oct, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVE-2019-12436

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-4.59% / 88.81%

7 Day CHG~0.00%

Published-19 Jun, 2019 | 12:00

Updated-04 Aug, 2024 | 23:17

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.

Vendor-n/a Canonical Ltd.Samba

Product-ubuntu_linux samba n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2007-2583

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-2.42% / 84.50%

7 Day CHG~0.00%

Published-09 May, 2007 | 22:00

Updated-07 Aug, 2024 | 13:42

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.

Vendor-n/a Oracle Corporation Canonical Ltd.Debian GNU/Linux

Product-mysql ubuntu_linux debian_linux n/a

CVE-2021-3671

Matching Score-8

Assigner-Red Hat, Inc.

Product-debian_linux samba management_services_for_netapp_hci ontap_select_deploy_administration_utility management_services_for_element_software Samba

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-1.48% / 80.19%

7 Day CHG+0.35%

Published-12 Oct, 2021 | 00:00

Updated-03 Aug, 2024 | 17:01

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.

Vendor-n/a Debian GNU/Linux NetApp, Inc.Samba

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2018-5388

Matching Score-8

Assigner-CERT/CC

Matching Score-8

Assigner-CERT/CC

CVSS Score-6.5||MEDIUM

EPSS-5.17% / 89.51%

7 Day CHG~0.00%

Published-31 May, 2018 | 00:00

Updated-05 Aug, 2024 | 05:33

In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.

Vendor-strongswan strongSwan Canonical Ltd.Debian GNU/Linux

Product-strongswan debian_linux ubuntu_linux strongSwan

CWE ID-CWE-124

Buffer Underwrite ('Buffer Underflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-3061

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.44% / 62.24%

7 Day CHG~0.00%

Published-18 Jul, 2018 | 13:00

Updated-02 Oct, 2024 | 19:54

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter storage_automation_store oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2018-3071

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.44% / 62.24%

7 Day CHG~0.00%

Published-18 Jul, 2018 | 13:00

Updated-02 Oct, 2024 | 19:52

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter storage_automation_store oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2018-3155

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.7||HIGH

EPSS-0.97% / 75.75%

7 Day CHG~0.00%

Published-17 Oct, 2018 | 01:00

Updated-02 Oct, 2024 | 19:42

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

Vendor-Microsoft Corporation NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux oncommand_insight storage_automation_store windows oncommand_workflow_automation oncommand_unified_manager mysql snapcenter MySQL Server

CVE-2018-2818

Matching Score-8

Assigner-Oracle

Product-ubuntu_linux snapcenter debian_linux storage_automation_store oncommand_workflow_automation oncommand_unified_manager mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.58% / 67.98%

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-03 Oct, 2024 | 20:16

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Debian GNU/Linux NetApp, Inc.Canonical Ltd.Oracle Corporation

CVE-2018-2817

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.23% / 45.85%

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-03 Oct, 2024 | 20:16

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVE-2018-2777

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.14% / 34.93%

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-03 Oct, 2024 | 20:20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation NetApp, Inc.Oracle Corporation Canonical Ltd.

Product-ubuntu_linux snapcenter mariadb active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2018-3277

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.21% / 42.81%

7 Day CHG~0.00%

Published-17 Oct, 2018 | 01:00

Updated-02 Oct, 2024 | 19:26

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation NetApp, Inc.Oracle Corporation Canonical Ltd.

Product-ubuntu_linux snapcenter mariadb active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2018-3173

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.21% / 42.81%

7 Day CHG~0.00%

Published-17 Oct, 2018 | 01:00

Updated-02 Oct, 2024 | 19:40

Vendor-MariaDB Foundation NetApp, Inc.Oracle Corporation Canonical Ltd.

Product-ubuntu_linux snapcenter mariadb active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2018-2810

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.14% / 34.93%

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-03 Oct, 2024 | 20:16

Vendor-MariaDB Foundation NetApp, Inc.Oracle Corporation Canonical Ltd.

Product-ubuntu_linux snapcenter mariadb active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2018-2784

Matching Score-8

Assigner-Oracle