PT-2022-3786 · Oracle+8 · Oracle Mysql Server+8

Published 2022-07-19 · Updated 2024-08-30 · CVE-2022-21539

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.29 and prior

Description The issue is related to the InnoDB component of Oracle MySQL Server and is associated with access control weaknesses. It allows a low-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in unauthorized update, insert, or delete access to some of the MySQL Server's accessible data, as well as unauthorized read access to a subset of the MySQL Server's accessible data. Additionally, it can cause a partial denial of service (partial DOS) of the MySQL Server.

Recommendations For versions 8.0.29 and prior, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

ALSA-2022:6590

ALSA-2022:7119

ALT-PU-2022-2552

ALT-PU-2022-3102

ALT-PU-2023-1912

BDU:2022-04579

CESA-2022_7119

CVE-2022-21539

OESA-2023-1834

OESA-2023-1835

OESA-2023-1836

OESA-2024-2071

RHSA-2022:6518

RHSA-2022:6590

RHSA-2022:7119

RHSA-2022_6590

RHSA-2022_7119

RLSA-2022:6590

RLSA-2022:7119

USN-5537-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Mysql Server

Oracle Mysql Server

Red Hat

Rocky Linux

Ubuntu

References · 623

• 🔥 https://github.com/drago-96/CVE-2022-0778 · Exploit
• 🔥 https://github.com/alcaparra/CVE-2022-1292 · Exploit
• 🔥 https://github.com/yywing/cve-2022-0778 · Exploit
• 🔥 https://github.com/jkakavas/CVE-2022-0778-POC · Exploit
• 🔥 https://github.com/und3sc0n0c1d0/CVE-2022-1292 · Exploit
• 🔥 https://github.com/rama291041610/CVE-2022-1292 · Exploit
• 🔥 https://github.com/greek0x0/CVE-2022-1292 · Exploit
• 🔥 https://github.com/li8u99/CVE-2022-1292 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-21881 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21454 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21459 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-21867 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21127 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20967 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21137 · Security Note