{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "Update to MySQL 8.0.46 (April 2026 CPU)\n CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005\n CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34267 CVE-2026-34270\n CVE-2026-34271 CVE-2026-34276 CVE-2026-34278 CVE-2026-34293 CVE-2026-34303\n CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238\n CVE-2026-35239 CVE-2026-35240", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_mysql/el7/advisories/2026/clsa-2026_1784801221.json" } ], "tracking": { "current_release_date": "2026-08-03T15:37:12Z", "generator": { "date": "2026-08-03T15:37:12Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1784801221", "initial_release_date": "2026-07-23T10:13:01Z", "revision_history": [ { "date": "2026-07-23T10:13:01Z", "number": "1", "summary": "Initial version" }, { "date": "2026-08-03T15:37:12Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "mysql-community: Fix of 22 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 7", "product": { "name": "Community Enterprise Operating System 7", "product_id": "CentOS-7", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-devel@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-embedded-compat@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-common@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-client@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-server-debug@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-server@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-libs@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-test@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-router-community@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-client-plugins@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-libs-compat@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product": { "name": "mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_id": "mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/mysql-community-icu-data-files@8.0.46-1.el7.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64" }, "product_reference": "mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-21518", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21518" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-34303", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34303" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22079", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22079" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21540", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21540" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21009", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21009" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30681", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30681" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-21536", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21536" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250124-0010/", "url": "https://security.netapp.com/advisory/ntap-20250124-0010/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50091", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50091" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20976", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20976" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22070", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22070" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21102", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21102" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0015/", "url": "https://security.netapp.com/advisory/ntap-20240426-0015/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21525", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21525" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250124-0010/", "url": "https://security.netapp.com/advisory/ntap-20250124-0010/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21062", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21062" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-53069", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53069" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2025.html", "url": "https://www.oracle.com/security-alerts/cpuoct2025.html" } ], "release_date": "2025-10-21T20:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50087", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50087" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21241", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21241" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30696", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30696" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22113", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22113" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-21497", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21497" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-22001", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-22001" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21061", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21061" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0014/", "url": "https://security.netapp.com/advisory/ntap-20240426-0014/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-35239", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-35239" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50097", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50097" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21236", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21236" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30705", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30705" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21239", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21239" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21531", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21531" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21501", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21501" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20969", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20969" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30688", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30688" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21057", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21057" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0011/", "url": "https://security.netapp.com/advisory/ntap-20240426-0011/" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-34278", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34278" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21069", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21069" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21125", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21125" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21197", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21197" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21521", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21521" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250124-0010/", "url": "https://security.netapp.com/advisory/ntap-20250124-0010/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-21238", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.1 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21238" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0009/", "url": "https://security.netapp.com/advisory/ntap-20241025-0009/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22054", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22054" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20998", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20998" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21503", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21503" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21534", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21534" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250124-0010/", "url": "https://security.netapp.com/advisory/ntap-20250124-0010/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21162", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21162" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21165", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21165" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240731-0007/", "url": "https://security.netapp.com/advisory/ntap-20240731-0007/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20994", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20994" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22112", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22112" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22097", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22097" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-35236", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-35236" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22005", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22005" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21201", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21201" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21207", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.38 and prior, 8.4.1 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21207" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0007/", "url": "https://security.netapp.com/advisory/ntap-20241025-0007/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50085", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50085" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21500", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21500" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50098", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50098" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21237", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21237" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21177", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21177" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21000", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21000" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.8, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-20978", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20978" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22114", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22114" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21060", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21060" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30703", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30703" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-30689", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30689" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22110", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22110" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22066", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22066" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22048", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22048" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2026-34267", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34267" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-34293", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34293" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21492", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21492" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250124-0011/", "url": "https://security.netapp.com/advisory/ntap-20250124-0011/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21051", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21051" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0012/", "url": "https://security.netapp.com/advisory/ntap-20240426-0012/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50104", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50104" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21179", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21179" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21130", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21130" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21546", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21546" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.8, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-53053", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53053" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2025.html", "url": "https://www.oracle.com/security-alerts/cpuoct2025.html" } ], "release_date": "2025-10-21T20:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50079", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50079" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21159", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21159" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0002/", "url": "https://security.netapp.com/advisory/ntap-20240801-0002/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21213", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21213" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21196", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21196" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22068", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22068" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22033", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22033" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50101", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50101" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22056", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22056" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-22005", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-22005" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20964", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20964" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20983", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20983" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0009/", "url": "https://security.netapp.com/advisory/ntap-20240201-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50082", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50082" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21529", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21529" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21163", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21163" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21157", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21157" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240731-0008/", "url": "https://security.netapp.com/advisory/ntap-20240731-0008/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-21941", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-21941" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2026.html", "url": "https://www.oracle.com/security-alerts/cpujan2026.html" } ], "release_date": "2026-01-20T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21015", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21015" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0010/", "url": "https://security.netapp.com/advisory/ntap-20240426-0010/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30693", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30693" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/06/msg00005.html", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00005.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22046", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22046" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21198", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21198" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50096", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50096" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21013", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21013" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50088", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50088" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21049", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21049" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0012/", "url": "https://security.netapp.com/advisory/ntap-20240426-0012/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21218", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21218" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22008", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22008" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30721", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30721" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21199", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21199" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-34270", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34270" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21054", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21054" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30685", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30685" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20981", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20981" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-22004", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-22004" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30715", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30715" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21173", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21173" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21160", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21160" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0002/", "url": "https://security.netapp.com/advisory/ntap-20240801-0002/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-34308", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34308" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21185", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.38, 8.4.1 and 9.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21185" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240731-0005/", "url": "https://security.netapp.com/advisory/ntap-20240731-0005/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20985", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20985" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21212", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Health Monitor). Supported versions that are affected are 8.0.39 and prior and 8.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21212" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0008/", "url": "https://security.netapp.com/advisory/ntap-20241025-0008/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-53044", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53044" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2025.html", "url": "https://www.oracle.com/security-alerts/cpuoct2025.html" } ], "release_date": "2025-10-21T20:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22064", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22064" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21200", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21200" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241101-0007/", "url": "https://security.netapp.com/advisory/ntap-20241101-0007/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22115", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22115" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21579", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21579" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30683", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30683" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20965", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20965" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0006/", "url": "https://security.netapp.com/advisory/ntap-20240201-0006/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20973", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20973" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21231", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21231" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-21555", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21555" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21047", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21047" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50080", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50080" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-53062", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53062" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2025.html", "url": "https://www.oracle.com/security-alerts/cpuoct2025.html" } ], "release_date": "2025-10-21T20:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50083", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50083" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30682", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30682" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21504", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21504" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250124-0010/", "url": "https://security.netapp.com/advisory/ntap-20250124-0010/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50081", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Client accessible data as well as unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50081" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-50084", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50084" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-22015", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-22015" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21135", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21135" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0002/", "url": "https://security.netapp.com/advisory/ntap-20240801-0002/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-53045", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53045" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2025.html", "url": "https://www.oracle.com/security-alerts/cpuoct2025.html" } ], "release_date": "2025-10-21T20:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21519", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21519" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50078", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50078" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20966", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20966" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30687", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30687" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21523", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21523" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21490", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21490" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00000.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21166", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21166" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0002/", "url": "https://security.netapp.com/advisory/ntap-20240801-0002/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30704", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30704" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30695", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30695" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20974", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20974" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-34304", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34304" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20972", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20972" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20962", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20962" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21134", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21134" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21522", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21522" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-53023", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.42. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53023" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-21948", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-21948" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2026.html", "url": "https://www.oracle.com/security-alerts/cpujan2026.html" } ], "release_date": "2026-01-20T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22084", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22084" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00017.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OR7GNQAJZ7NMHT4HRDNROR3DS272KKET/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OR7GNQAJZ7NMHT4HRDNROR3DS272KKET/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UCGSAQFWYIJRIYLZLHPS3MRUS4AQ5JQH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UCGSAQFWYIJRIYLZLHPS3MRUS4AQ5JQH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZL2AT2ZUKB6K22UTISHEZ4JKG4VZ3VO/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZL2AT2ZUKB6K22UTISHEZ4JKG4VZ3VO/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22059", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22059" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21494", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21494" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250124-0010/", "url": "https://security.netapp.com/advisory/ntap-20250124-0010/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20968", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20968" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0008/", "url": "https://security.netapp.com/advisory/ntap-20240201-0008/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-35240", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-35240" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21055", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21055" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0011/", "url": "https://security.netapp.com/advisory/ntap-20240426-0011/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-53042", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53042" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2025.html", "url": "https://www.oracle.com/security-alerts/cpuoct2025.html" } ], "release_date": "2025-10-21T20:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-34271", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34271" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22065", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22065" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22103", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22103" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21230", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21230" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50099", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50099" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-35238", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-35238" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21053", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21053" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0012/", "url": "https://security.netapp.com/advisory/ntap-20240426-0012/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20993", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20993" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0014/", "url": "https://security.netapp.com/advisory/ntap-20240426-0014/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21491", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21491" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20967", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20967" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20963", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20963" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21584", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21584" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50094", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.42, 8.4.5 and 9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50094" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21581", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21581" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50077", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50077" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21505", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21505" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21194", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21194" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-22002", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-22002" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50092", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50092" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21247", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Client accessible data as well as unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21247" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241101-0006/", "url": "https://security.netapp.com/advisory/ntap-20241101-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.8, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21193", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21193" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2024.html", "url": "https://www.oracle.com/security-alerts/cpuoct2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241025-0006/", "url": "https://security.netapp.com/advisory/ntap-20241025-0006/" } ], "release_date": "2024-10-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50102", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50102" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22053", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.42 and prior and 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server and unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22053" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21056", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21056" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0012/", "url": "https://security.netapp.com/advisory/ntap-20240426-0012/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21574", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21574" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20970", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20970" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21052", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21052" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0012/", "url": "https://security.netapp.com/advisory/ntap-20240426-0012/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21575", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21575" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21129", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21129" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21543", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21543" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-53040", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53040" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2025.html", "url": "https://www.oracle.com/security-alerts/cpuoct2025.html" } ], "release_date": "2025-10-21T20:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20961", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20961" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21559", "cwe": { "id": "CWE-306", "name": "Missing Authentication for Critical Function" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21559" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50100", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50100" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21096", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21096" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKWVBZ6DBRFMLDXTHJUZ6LU7MJ5RTNA7/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKWVBZ6DBRFMLDXTHJUZ6LU7MJ5RTNA7/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KFYBDWDBE4YICSV34LJZGYRVSG6QIRKE/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KFYBDWDBE4YICSV34LJZGYRVSG6QIRKE/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/09/msg00034.html", "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00034.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20982", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20982" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20960", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20960" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20971", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20971" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-34276", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-34276" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21137", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21137" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240731-0009/", "url": "https://security.netapp.com/advisory/ntap-20240731-0009/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21142", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21142" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22058", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22058" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30699", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30699" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21577", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21577" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21050", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21050" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0012/", "url": "https://security.netapp.com/advisory/ntap-20240426-0012/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21585", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21585" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21008", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21008" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20977", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20977" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" } ], "release_date": "2024-01-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22032", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22032" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50093", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50093" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-21998", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-21998" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21171", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21171" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21087", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-21087" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240426-0013/", "url": "https://security.netapp.com/advisory/ntap-20240426-0013/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2024.html", "url": "https://www.oracle.com/security-alerts/cpuapr2024.html" } ], "release_date": "2024-04-16T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-50086", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-50086" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2025.html", "url": "https://www.oracle.com/security-alerts/cpujul2025.html" } ], "release_date": "2025-07-15T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-53054", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-53054" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2025.html", "url": "https://www.oracle.com/security-alerts/cpuoct2025.html" } ], "release_date": "2025-10-21T20:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-20984", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security : Firewall). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20984" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2024.html", "url": "https://www.oracle.com/security-alerts/cpujan2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0003/", "url": "https://security.netapp.com/advisory/ntap-20240201-0003/" } ], "release_date": "2024-02-17T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22038", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22038" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-20996", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2024-20996" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240801-0001/", "url": "https://security.netapp.com/advisory/ntap-20240801-0001/" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21580", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21580" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-30684", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-30684" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2025.html", "url": "https://www.oracle.com/security-alerts/cpuapr2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250502-0006/", "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" } ], "release_date": "2025-04-15T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22092", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22092" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22057", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22057" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230725-0005/", "url": "https://security.netapp.com/advisory/ntap-20230725-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2023.html", "url": "https://www.oracle.com/security-alerts/cpujul2023.html" } ], "release_date": "2023-07-18T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-22017", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-22017" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-35237", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-35237" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22111", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22111" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-22009", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2026-22009" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2026.html", "url": "https://www.oracle.com/security-alerts/cpuapr2026.html" } ], "release_date": "2026-04-21T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-22078", "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2023-22078" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231027-0009/", "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2023.html", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "release_date": "2023-10-17T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21520", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 1.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-mysql/cve/CVE-2025-21520" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2025.html", "url": "https://www.oracle.com/security-alerts/cpujan2025.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250131-0004/", "url": "https://security.netapp.com/advisory/ntap-20250131-0004/" } ], "release_date": "2025-01-21T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-23T10:07:07.465518Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221", "product_ids": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els-mysql/releases/CLSA-2026:1784801221" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 1.8, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CentOS-7:mysql-community-client-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-client-plugins-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-common-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-devel-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-embedded-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-icu-data-files-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-libs-compat-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-server-debug-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-community-test-0:8.0.46-1.el7.tuxcare.els1.x86_64", "CentOS-7:mysql-router-community-0:8.0.46-1.el7.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] } ] }