PT-2022-14954 · Oracle+8 · Mysql Server+7

Published 2022-04-19 · Updated 2024-08-30 · CVE-2022-21423

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.28 and prior

Description The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server, resulting in unauthorized ability to cause a partial denial of service (partial DOS) or a hang or frequently repeatable crash (complete DOS) of the MySQL Server.

Recommendations For versions 8.0.28 and prior, update to a version later than 8.0.28 to resolve the issue.

Exploit

Fix

Related Identifiers

ALSA-2022:6590

ALSA-2022:7119

ALT-PU-2022-2156

ALT-PU-2022-2171

ALT-PU-2023-1912

CESA-2022_7119

CVE-2022-21423

OESA-2024-2071

RHSA-2022:6518

RHSA-2022:6590

RHSA-2022:7119

RHSA-2022_6590

RHSA-2022_7119

RLSA-2022:6590

RLSA-2022:7119

USN-5400-1

USN-5400-3

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Mysql Server

Red Hat

Rocky Linux

Ubuntu

References · 619

• 🔥 https://github.com/drago-96/CVE-2022-0778 · Exploit
• 🔥 https://github.com/alcaparra/CVE-2022-1292 · Exploit
• 🔥 https://github.com/yywing/cve-2022-0778 · Exploit
• 🔥 https://github.com/jkakavas/CVE-2022-0778-POC · Exploit
• 🔥 https://github.com/und3sc0n0c1d0/CVE-2022-1292 · Exploit
• 🔥 https://github.com/rama291041610/CVE-2022-1292 · Exploit
• 🔥 https://github.com/greek0x0/CVE-2022-1292 · Exploit
• 🔥 https://github.com/li8u99/CVE-2022-1292 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-21881 · Security Note
• https://ubuntu.com/security/CVE-2022-21423 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21454 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-21867 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21459 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21127 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20967 · Security Note