ByteOS Network

Vulnerability Details :

CVE-2017-11368

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-09 Aug, 2017 | 18:00

Updated At-05 Aug, 2024 | 18:05

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:09 Aug, 2017 | 18:00

Updated At:05 Aug, 2024 | 18:05

▼CVE Numbering Authority (CNA)

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/	vendor-advisory x_refsource_FEDORA
https://access.redhat.com/errata/RHSA-2018:0666	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/100291	vdb-entry x_refsource_BID
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/	vendor-advisory x_refsource_FEDORA

Hyperlink: https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970

Resource:

x_refsource_CONFIRM

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://access.redhat.com/errata/RHSA-2018:0666

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/bid/100291

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/

Resource:

vendor-advisory

x_refsource_FEDORA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970	x_refsource_CONFIRM x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/	vendor-advisory x_refsource_FEDORA x_transferred
https://access.redhat.com/errata/RHSA-2018:0666	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/100291	vdb-entry x_refsource_BID x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/	vendor-advisory x_refsource_FEDORA x_transferred

Hyperlink: https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:0666

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/100291

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:09 Aug, 2017 | 18:29

Updated At:13 May, 2026 | 00:24

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P

Type: Primary

Version: 3.0

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:N/I:N/A:P

CPE Matches

Fedora Project

>>fedora>>25

cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*

Fedora Project

>>fedora>>26

cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos>>5-1.13.7

cpe:2.3:a:mit:kerberos:5-1.13.7:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.7

cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.7.1

cpe:2.3:a:mit:kerberos_5:1.7.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.8

cpe:2.3:a:mit:kerberos_5:1.8:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.8.1

cpe:2.3:a:mit:kerberos_5:1.8.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.8.2

cpe:2.3:a:mit:kerberos_5:1.8.2:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.8.3

cpe:2.3:a:mit:kerberos_5:1.8.3:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.8.4

cpe:2.3:a:mit:kerberos_5:1.8.4:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.8.5

cpe:2.3:a:mit:kerberos_5:1.8.5:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.8.6

cpe:2.3:a:mit:kerberos_5:1.8.6:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.9

cpe:2.3:a:mit:kerberos_5:1.9:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.9.1

cpe:2.3:a:mit:kerberos_5:1.9.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.9.2

cpe:2.3:a:mit:kerberos_5:1.9.2:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.9.3

cpe:2.3:a:mit:kerberos_5:1.9.3:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.9.4

cpe:2.3:a:mit:kerberos_5:1.9.4:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.10

cpe:2.3:a:mit:kerberos_5:1.10:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.10.1

cpe:2.3:a:mit:kerberos_5:1.10.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.10.2

cpe:2.3:a:mit:kerberos_5:1.10.2:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.10.3

cpe:2.3:a:mit:kerberos_5:1.10.3:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.10.4

cpe:2.3:a:mit:kerberos_5:1.10.4:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.11

cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.11.1

cpe:2.3:a:mit:kerberos_5:1.11.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.11.2

cpe:2.3:a:mit:kerberos_5:1.11.2:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.11.3

cpe:2.3:a:mit:kerberos_5:1.11.3:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.11.4

cpe:2.3:a:mit:kerberos_5:1.11.4:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.11.5

cpe:2.3:a:mit:kerberos_5:1.11.5:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.12

cpe:2.3:a:mit:kerberos_5:1.12:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.12.1

cpe:2.3:a:mit:kerberos_5:1.12.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.12.2

cpe:2.3:a:mit:kerberos_5:1.12.2:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.12.3

cpe:2.3:a:mit:kerberos_5:1.12.3:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.13

cpe:2.3:a:mit:kerberos_5:1.13:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.13.1

cpe:2.3:a:mit:kerberos_5:1.13.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.13.2

cpe:2.3:a:mit:kerberos_5:1.13.2:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.13.3

cpe:2.3:a:mit:kerberos_5:1.13.3:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.13.5

cpe:2.3:a:mit:kerberos_5:1.13.5:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.13.6

cpe:2.3:a:mit:kerberos_5:1.13.6:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14

cpe:2.3:a:mit:kerberos_5:1.14:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14

cpe:2.3:a:mit:kerberos_5:1.14:alpha1:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14

cpe:2.3:a:mit:kerberos_5:1.14:beta1:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14

cpe:2.3:a:mit:kerberos_5:1.14:beta2:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14.1

cpe:2.3:a:mit:kerberos_5:1.14.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14.2

cpe:2.3:a:mit:kerberos_5:1.14.2:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14.3

cpe:2.3:a:mit:kerberos_5:1.14.3:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14.4

cpe:2.3:a:mit:kerberos_5:1.14.4:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.14.5

cpe:2.3:a:mit:kerberos_5:1.14.5:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.15

cpe:2.3:a:mit:kerberos_5:1.15:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.15.1

cpe:2.3:a:mit:kerberos_5:1.15.1:*:*:*:*:*:*:*

MIT (Massachusetts Institute of Technology)

>>kerberos_5>>1.15.1

cpe:2.3:a:mit:kerberos_5:1.15.1:beta1:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-617	Primary	nvd@nist.gov

CWE ID: CWE-617

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/100291	cve@mitre.org	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:0666	cve@mitre.org	N/A
https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970	cve@mitre.org	Patch Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/	cve@mitre.org	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/	cve@mitre.org	N/A
http://www.securityfocus.com/bid/100291	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:0666	af854a3a-2127-422b-91ae-364da2661108	N/A
https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.securityfocus.com/bid/100291

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://access.redhat.com/errata/RHSA-2018:0666

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/100291

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://access.redhat.com/errata/RHSA-2018:0666

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Third Party Advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

245Records found

CVE-2021-2357

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.38% / 59.70%

7 Day CHG~0.00%

Published-20 Jul, 2021 | 22:43

Updated-26 Sep, 2024 | 14:02

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-mysql fedora oncommand_insight MySQL Server

CVE-2021-2146

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.23% / 79.59%

7 Day CHG-0.49%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 18:10

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2178

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-1.34% / 80.40%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2196

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.23% / 79.59%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:28

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2154

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.11% / 28.95%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 18:09

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Fedora Project NetApp, Inc.Oracle Corporation

Product-mariadb oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2170

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.23% / 79.59%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2169

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.23% / 79.59%

7 Day CHG-0.49%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2166

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.13% / 78.72%

7 Day CHG-0.02%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:33

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Fedora Project NetApp, Inc.Oracle Corporation

Product-mariadb oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2172

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-1.34% / 80.42%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2180

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-3.26% / 87.42%

7 Day CHG-1.26%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:31

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Fedora Project NetApp, Inc.Oracle Corporation

Product-snapcenter mariadb fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2021-2164

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.23% / 79.59%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:33

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2193

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.23% / 79.59%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:28

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-2179

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.23% / 79.59%

7 Day CHG-0.49%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 15:31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2021-21394

Matching Score-8

Assigner-GitHub, Inc.

View Details

Matching Score-8

Assigner-GitHub, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.52% / 67.20%

7 Day CHG~0.00%

Published-12 Apr, 2021 | 20:45

Updated-03 Aug, 2024 | 18:09

Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Note that the groups feature is not part of the Matrix specification and the chosen maximum lengths are arbitrary. Not all clients might abide by them. Refer to referenced GitHub security advisory for additional details including workarounds.

Vendor-The Matrix.org Foundation Fedora Project

Product-fedora synapse synapse

CWE ID-CWE-20

Improper Input Validation

CVE-2021-20266

Matching Score-8

Assigner-Red Hat, Inc.

View Details

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-4.9||MEDIUM

EPSS-0.06% / 19.84%

7 Day CHG~0.00%

Published-30 Apr, 2021 | 11:22

Updated-03 Aug, 2024 | 17:37

A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.

Vendor-rpm n/a Fedora Project

Product-fedora rpm rpm

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-8185

Matching Score-8

Assigner-HackerOne

View Details

Matching Score-8

Assigner-HackerOne

CVSS Score-6.5||MEDIUM

EPSS-0.68% / 72.03%

7 Day CHG~0.00%

Published-02 Jul, 2020 | 18:35

Updated-04 Aug, 2024 | 09:56

A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.

Vendor-n/a Fedora Project Ruby on Rails

Product-fedora rails https://github.com/rails/rails

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2020-8619

Matching Score-8

Assigner-Internet Systems Consortium (ISC)

View Details

Matching Score-8

Assigner-Internet Systems Consortium (ISC)

CVSS Score-4.9||MEDIUM

EPSS-6.93% / 91.61%

7 Day CHG~0.00%

Published-17 Jun, 2020 | 21:20

Updated-17 Sep, 2024 | 03:28

A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.

Vendor-openSUSE Fedora Project NetApp, Inc.Canonical Ltd.Debian GNU/Linux Internet Systems Consortium, Inc.

Product-ubuntu_linux debian_linux fedora bind leap steelstore_cloud_integrated_storage BIND9

CWE ID-CWE-404

Improper Resource Shutdown or Release

CVE-2020-8552

Matching Score-8

Assigner-Kubernetes

View Details

Matching Score-8

Assigner-Kubernetes

CVSS Score-5.3||MEDIUM

EPSS-0.07% / 22.55%

7 Day CHG~0.00%

Published-27 Mar, 2020 | 14:25

Updated-04 Aug, 2024 | 10:03

Kubernetes API server denial of service

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

Vendor-Fedora Project Kubernetes

Product-kubernetes fedora Kubernetes

CWE ID-CWE-789

Memory Allocation with Excessive Size Value

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2020-5238

Matching Score-8

Assigner-GitHub, Inc.

View Details

Matching Score-8

Assigner-GitHub, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.51% / 66.77%

7 Day CHG~0.00%

Published-01 Jul, 2020 | 23:05

Updated-04 Aug, 2024 | 08:22

Denial of service in table parsing in cmark-gfm

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project. The issue has been fixed in version 0.29.0.gfm.1.

Vendor-github_flavored_markdown_project Fedora Project GitHub, Inc.

Product-github_flavored_markdown fedora cmark-gfm

CWE ID-CWE-20

Improper Input Validation

CVE-2020-2928

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.66% / 71.57%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:49

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Fedora Project

Product-mysql fedora MySQL Server

CVE-2020-2923

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.49% / 65.85%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:50

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2812

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.12% / 30.50%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 19:08

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Debian GNU/Linux NetApp, Inc.Fedora Project openSUSE Oracle Corporation Canonical Ltd.

Product-ubuntu_linux debian_linux mariadb oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation leap mysql snapcenter MySQL Server

CVE-2020-28200

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-1.24% / 79.68%

7 Day CHG~0.00%

Published-28 Jun, 2021 | 12:08

Updated-04 Aug, 2024 | 16:33

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.

Vendor-n/a Fedora Project Dovecot

Product-fedora dovecot n/a

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2020-2897

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.49% / 65.85%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:52

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2903

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.30% / 53.75%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:52

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2853

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.67% / 71.72%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 19:03

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2898

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.37% / 59.43%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:52

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). The supported version that is affected is 8.0.19. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2925

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.30% / 53.75%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:49

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2895

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.49% / 65.85%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:53

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2016-3120

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-4.32% / 89.14%

7 Day CHG~0.00%

Published-01 Aug, 2016 | 01:00

Updated-06 May, 2026 | 22:30

The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.

Vendor-n/a MIT (Massachusetts Institute of Technology)

Product-kerberos_5 n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2022-21303

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.28% / 51.61%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:23

Updated-24 Sep, 2024 | 20:25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2020-2892

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.37% / 59.43%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:53

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2893

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.49% / 65.85%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:53

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2901

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.30% / 53.75%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:52

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-28242

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.41% / 61.56%

7 Day CHG~0.00%

Published-06 Nov, 2020 | 05:02

Updated-15 Aug, 2024 | 12:44

An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 and Certified Asterisk before 16.8-cert5. If Asterisk is challenged on an outbound INVITE and the nonce is changed in each response, Asterisk will continually send INVITEs in a loop. This causes Asterisk to consume more and more memory since the transaction will never terminate (even if the call is hung up), ultimately leading to a restart or shutdown of Asterisk. Outbound authentication must be configured on the endpoint for this to occur.

Vendor-n/a Debian GNU/Linux Asterisk Sangoma Technologies Corp.Fedora Project

Product-certified_asterisk asterisk fedora debian_linux n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2020-2924

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.30% / 53.75%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:50

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2904

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.49% / 65.85%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:51

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2814

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.12% / 30.89%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 19:08

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.47 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Debian GNU/Linux NetApp, Inc.Fedora Project openSUSE Oracle Corporation

Product-debian_linux mariadb oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation leap mysql snapcenter MySQL Server

CVE-2020-2759

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.30% / 53.75%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:41

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2770

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.67% / 71.72%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:39

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2780

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.51% / 66.70%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation NetApp, Inc.Fedora Project Oracle Corporation Canonical Ltd.

Product-ubuntu_linux snapcenter mariadb fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2020-2762

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.37% / 59.43%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:40

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2763

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.30% / 53.75%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:40

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2765

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.37% / 59.43%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:40

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2779

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.51% / 66.90%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:38

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2020-2761

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.67% / 71.72%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:41

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2022-21264

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.28% / 51.61%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:22

Updated-24 Sep, 2024 | 20:30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2020-2774

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.41% / 62.04%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:39

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2022-21270

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.28% / 51.61%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:22

Updated-24 Sep, 2024 | 20:29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2022-21249

Matching Score-8

Assigner-Oracle

View Details

Matching Score-8

Assigner-Oracle

CVSS Score-2.7||LOW

EPSS-0.15% / 35.63%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:22

Updated-24 Sep, 2024 | 20:31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2017-11368

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs