Every CVE Search/ Get API key

CVE-2023-21866

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

4.9 MediumFix available

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.08%Up 0.2 points since Jan 18, 2023
90%50%10%1%

What each source reports

CVE List Score used 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2023-21866
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2023-26032 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2023-26032
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-r2hq-gv77-cq97 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-r2hq-gv77-cq97
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2023-21866
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2023-21866
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVOESA-2024-2071 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Security Fix(es):

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.(CVE-2021-22570)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21412)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21413)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21414)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21417)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21418)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized…

Record
OESA-2024-2071
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVRHSA-2022:6518 7.2

Red Hat Security Advisory: rh-mysql80-mysql security, bug fix, and enhancement update

Record
RHSA-2022:6518
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:6590 6.5

Red Hat Security Advisory: mysql security, bug fix, and enhancement update

Record
RHSA-2022:6590
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:7119 7.2

Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update

Record
RHSA-2022:7119
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:6590 6.5

Moderate: mysql security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30). (BZ#2122589)

Security Fix(es):

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479)

  • mysql: Server: DML unspecified vulnerability (CPU Apr 2022) (CVE-2022-21413)

  • mysql: Server: Replication unspecified vulnerability (CPU Apr 2022) (CVE-2022-21415)

  • mysql: InnoDB multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21423)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21425, CVE-2022-21444)

  • mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21454)

  • mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Jul 2022) (CVE-2022-21455)

  • mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21457)

  • mysql: Server: Logging unspecified vulnerability (CPU Apr 2022) (CVE-2022-21460)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21556, CVE-2022-21569)

  • mysql: Server: Options unspecified vulnerability (CPU Jul 2022) (CVE-2022-21515)

  • mysql: InnoDB multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21517, CVE-2022-21537, CVE-2022-21539)

  • mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21522, CVE-2022-21534)

  • mysql: Server: Federated unspecified vulnerability (CPU Jul 2022) (CVE-2022-21547)

  • mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022) (CVE-2022-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Default logrotate set to wrong log file (BZ#2122592)
Record
RLSA-2022:6590
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:7119 7.2

Moderate: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30).

Security Fix(es):

  • mysql: Server: DML multiple unspecified vulnerabilities (CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2021-2481, CVE-2021-35575, CVE-2021-35577, CVE-2021-35610, CVE-2021-35612, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628, CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35638, CVE-2021-35641, CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645, CVE-2021-35646, CVE-2021-35647, CVE-2022-21253, CVE-2022-21254, CVE-2022-21264, CVE-2022-21278, CVE-2022-21297, CVE-2022-21339, CVE-2022-21342, CVE-2022-21351, CVE-2022-21370, CVE-2022-21378, CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21569, CVE-2022-21265)

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2021-35546, CVE-2022-21344, CVE-2022-21415)

  • mysql: Server: Error Handling unspecified vulnerability (CVE-2021-35596)

  • mysql: C API unspecified vulnerability (CVE-2021-35597)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2021-35602, CVE-2021-35630, CVE-2022-21515)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2021-35604, CVE-2022-21302, CVE-2022-21348, CVE-2022-21352, CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21517, CVE-2022-21537, CVE-2022-21539, CVE-2022-21423)

  • mysql: Server: Group Replication Plugin multiple unspecified vulnerabilities (CVE-2021-35608, CVE-2022-21256, CVE-2022-21379, CVE-2022-21454)

  • mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2021-35622, CVE-2022-21358, CVE-2022-21372, CVE-2022-21538)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2021-35624, CVE-2022-21245, CVE-2021-35625)

  • mysql: Server: GIS unspecified vulnerability (CVE-2021-35631)

  • mysql: Server: Data Dictionary unspecified vulnerability (CVE-2021-35632)

  • mysql: Server: PS unspecified vulnerability (CVE-2021-35637)

  • mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CVE-2021-35639, CVE-2022-21303, CVE-2022-21522, CVE-2022-21534)

  • mysql: Server: FTS multiple unspecified vulnerabilities (CVE-2021-35648, CVE-2022-21427)

  • mysql: Server: Federated multiple unspecified vulnerabilities (CVE-2022-21270, CVE-2022-21547)

  • mysql: Server: Parser unspecified vulnerability (CVE-2022-21304)

  • mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2022-21362, CVE-2022-21374)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2022-21367)

  • mysql: Server: Components Services unspecified vulnerability (CVE-2022-21368)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2022-21425, CVE-2022-21444, CVE-2021-35640, CVE-2022-21249)

  • mysql: Server: PAM Auth Plugin unspecified vulnerability (CVE-2022-21457)

  • mysql: Server: Logging multiple unspecified vulnerabilities (CVE-2022-21460, CVE-2021-35633)

  • mysql: Server: Security: Roles unspecified vulnerability (CVE-2021-35623)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Rebuild mecab due to change in the suffix (from .el8 to .el8.0.0) [Rocky Linux-8] (BZ#2110940)
Record
RLSA-2022:7119
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-21866 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
UBUNTU-CVE-2023-21866
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:7119 No score

Moderate: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30).

Security Fix(es):

  • mysql: Server: DML multiple unspecified vulnerabilities (CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413)
  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2021-2481, CVE-2021-35575, CVE-2021-35577, CVE-2021-35610, CVE-2021-35612, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628, CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35638, CVE-2021-35641, CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645, CVE-2021-35646, CVE-2021-35647, CVE-2022-21253, CVE-2022-21254, CVE-2022-21264, CVE-2022-21278, CVE-2022-21297, CVE-2022-21339, CVE-2022-21342, CVE-2022-21351, CVE-2022-21370, CVE-2022-21378, CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21569, CVE-2022-21265)
  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2021-35546, CVE-2022-21344, CVE-2022-21415)
  • mysql: Server: Error Handling unspecified vulnerability (CVE-2021-35596)
  • mysql: C API unspecified vulnerability (CVE-2021-35597)
  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2021-35602, CVE-2021-35630, CVE-2022-21515)
  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2021-35604, CVE-2022-21302, CVE-2022-21348, CVE-2022-21352, CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21517, CVE-2022-21537, CVE-2022-21539, CVE-2022-21423)
  • mysql: Server: Group Replication Plugin multiple unspecified vulnerabilities (CVE-2021-35608, CVE-2022-21256, CVE-2022-21379, CVE-2022-21454)
  • mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2021-35622, CVE-2022-21358, CVE-2022-21372, CVE-2022-21538)
  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2021-35624, CVE-2022-21245, CVE-2021-35625)
  • mysql: Server: GIS unspecified vulnerability (CVE-2021-35631)
  • mysql: Server: Data Dictionary unspecified vulnerability (CVE-2021-35632)
  • mysql: Server: PS unspecified vulnerability (CVE-2021-35637)
  • mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CVE-2021-35639, CVE-2022-21303, CVE-2022-21522, CVE-2022-21534)
  • mysql: Server: FTS multiple unspecified vulnerabilities (CVE-2021-35648, CVE-2022-21427)
  • mysql: Server: Federated multiple unspecified vulnerabilities (CVE-2022-21270, CVE-2022-21547)
  • mysql: Server: Parser unspecified vulnerability (CVE-2022-21304)
  • mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2022-21362, CVE-2022-21374)
  • mysql: Server: Compiling unspecified vulnerability (CVE-2022-21367)
  • mysql: Server: Components Services unspecified vulnerability (CVE-2022-21368)
  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2022-21425, CVE-2022-21444, CVE-2021-35640, CVE-2022-21249)
  • mysql: Server: PAM Auth Plugin unspecified vulnerability (CVE-2022-21457)
  • mysql: Server: Logging multiple unspecified vulnerabilities (CVE-2022-21460, CVE-2021-35633)
  • mysql: Server: Security: Roles unspecified vulnerability (CVE-2021-35623)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Rebuild mecab due to change in the suffix (from .el8 to .el8.0.0) [almalinux-8] (BZ#2110940)
Record
ALSA-2022:7119
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mecab
AlmaLinux:8
From an advisory covering 125 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 125 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3340+d764b636
2.7.0.20070801-16.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 125 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7
2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 125 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3340+d764b636
2.7.0.20070801-16.module_el8.6.0+3340+d764b636
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 125 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7
2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7
mysql
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-common
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-devel
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-errmsg
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-libs
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
Show 61 moreShow less
Affected packages
PackageAffectedFixed
mysql-server
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-test
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql
openEuler:20.03-LTS-SP4
From an advisory covering 218 CVEs
 before 8.0.38-1.oe2003sp4
8.0.38-1.oe2003sp4
rh-mysql80-mysql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-config-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-icu-data-files
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-server-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
mysql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-errmsg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-server-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mysql-test-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:0.996-2.module+el8.6.0+16523+5cb0e868
0:0.996-2.module+el8.6.0+16523+5cb0e868
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:0.996-2.module+el8.6.0+16523+5cb0e868
0:0.996-2.module+el8.6.0+16523+5cb0e868
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:0.996-2.module+el8.6.0+16523+5cb0e868
0:0.996-2.module+el8.6.0+16523+5cb0e868
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql
Rocky Linux:9
From an advisory covering 52 CVEs
 before 0:8.0.30-3.el9_0
0:8.0.30-3.el9_0
mecab
Rocky Linux:8
From an advisory covering 124 CVEs
 before 0:0.996-2.module+el8.6.0+1057+4d6a1721
0:0.996-2.module+el8.6.0+1057+4d6a1721
mecab-ipadic
Rocky Linux:8
From an advisory covering 124 CVEs
 before 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
mysql
Rocky Linux:8
From an advisory covering 124 CVEs
 before 0:8.0.30-1.module+el8.6.0+1057+4d6a1721
0:8.0.30-1.module+el8.6.0+1057+4d6a1721
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mysql-8.0
Ubuntu:20.04:LTS
 before 8.0.29-0ubuntu0.20.04.2, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 15 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.3
8.0.29-0ubuntu0.20.04.2
mysql-8.0
Ubuntu:22.04:LTS
 before 8.0.29-0ubuntu0.22.04.1, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu4
8.0.29-0ubuntu0.22.04.1

History

History
RecordedChangedSources
affected
affected, aliases, facts, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-21866 is a medium vulnerability (CVSS 4.9) in Oracle Mysql Server, published September 20, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in mysql-8.0 8.0.29-0ubuntu0.20.04.2.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 619 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open