REDHAT-BUG-2359963: Medium severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL (InnoDB)to a version that resolves this vulnerability.Fixed in 8.0.41 - Upgrade
Upgrade
Oracle MySQL (InnoDB)to a version that resolves this vulnerability.Fixed in 8.4.4 - Upgrade
Upgrade
Oracle MySQL (InnoDB)to a version that resolves this vulnerability.Fixed in 9.2.0
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2359963?
REDHAT-BUG-2359963 is classified as easily exploitable and poses a significant risk due to potential remote access for high privileged attackers.
How do I fix REDHAT-BUG-2359963?
To fix REDHAT-BUG-2359963, upgrade your MySQL Server to a version outside the affected ranges, specifically above 8.0.41, 8.4.4, or 9.2.0.
Which versions of MySQL Server are affected by REDHAT-BUG-2359963?
Affected MySQL Server versions for REDHAT-BUG-2359963 include 8.0.0 to 8.0.41, 8.4.0 to 8.4.4, and 9.0.0 to 9.2.0.
What kind of threats does REDHAT-BUG-2359963 pose?
REDHAT-BUG-2359963 allows high privileged attackers to compromise the MySQL Server via network access using various protocols.
Is patching required for REDHAT-BUG-2359963?
Yes, patching is required for REDHAT-BUG-2359963 to secure your MySQL Server against potential exploits.