CVE-2022-21589
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
- Record
CVE-2022-21589- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
EUVDEUVD-2022-26813
4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
- Record
EUVD-2022-26813- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hwfp-8w72-6fqv
4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
- Record
GHSA-hwfp-8w72-6fqv- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
NVD
4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
- Record
CVE-2022-21589- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSV
4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
- Record
CVE-2022-21589- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2019:2484
7.1
Red Hat Security Advisory: rh-mysql80-mysql security update
- Record
RHSA-2019:2484- CVSS 3.0
- 7.1 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVRHSA-2019:2511
7.1
Red Hat Security Advisory: mysql:8.0 security update
- Record
RHSA-2019:2511- CVSS 3.0
- 7.1 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-21589
4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
- Record
UBUNTU-CVE-2022-21589- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVCLSA-2022-1669240747 No score
Fix CVE(s): CVE-2022-21617, CVE-2022-21592, CVE-2022-21608, CVE-2022-21589
- SECURITY UPDATE: Update to 5.7.40 to fix security issues
- CVE-2022-21589, CVE-2022-21592, CVE-2022-21608, CVE-2022-21617
- Record
CLSA-2022-1669240747- Updated
- 2026-11-02
OSVUSN-5696-1 No score
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 8.0.31 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Ubuntu 18.04 LTS has been updated to MySQL 5.7.40.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information:
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-40.html https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-31.html https://www.oracle.com/security-alerts/cpuoct2022.html
- Record
USN-5696-1- Updated
- 2026-11-02
OSVUSN-5696-2 No score
mysql-5.7 vulnerabilities
USN-5696-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.7.40 in Ubuntu 16.04 ESM.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information:
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-40.html https://www.oracle.com/security-alerts/cpuoct2022.html
- Record
USN-5696-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libmysqlclient-devTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
libmysqlclient20TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
libmysqld-devTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-clientTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-client-5.7TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-client-core-5.7TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-commonTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-serverTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-server-5.7TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-server-core-5.7TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-source-5.7TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-testsuiteTuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
mysql-testsuite-5.7TuxCare:Ubuntu:16.04 From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 | 5.7.40-0ubuntu0.16.04.1+tuxcare.els1 |
rh-mysql80-mysqlRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-commonRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-configRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-config-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-develRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-errmsgRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-serverRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-server-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-testRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
mecabRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-ipadicRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de | 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de |
mecab-ipadic-EUCJPRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de | 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de |
mysqlRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-commonRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-develRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-errmsgRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-libsRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-serverRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-server-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-testRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-test-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-5.5Ubuntu:14.04:LTS |
All versions, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 20 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1 |
None known |
mysql-5.7Ubuntu:Pro:16.04:LTS |
before 5.7.40-0ubuntu0.16.04.1+esm1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1 Show 26 moreShow less5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm2 |
5.7.40-0ubuntu0.16.04.1+esm1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2 |
None known |
mysql-5.7Ubuntu:18.04:LTS |
before 5.7.40-0ubuntu0.18.04.1, plus listed versions 5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1 Show 18 moreShow less5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.2 |
5.7.40-0ubuntu0.18.04.1 |
mysql-5.7Ubuntu:18.04:LTS From an advisory covering 16 CVEs |
before 5.7.40-0ubuntu0.18.04.1, plus listed versions 5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1 Show 18 moreShow less5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.2 |
5.7.40-0ubuntu0.18.04.1 |
mysql-8.0Ubuntu:20.04:LTS From an advisory covering 16 CVEs |
before 8.0.31-0ubuntu0.20.04.1, plus listed versions 8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5 Show 18 moreShow less8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.2 |
8.0.31-0ubuntu0.20.04.1 |
mysql-8.0Ubuntu:22.04:LTS From an advisory covering 16 CVEs |
before 8.0.31-0ubuntu0.22.04.1, plus listed versions 8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.18.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.1 |
8.0.31-0ubuntu0.22.04.1 |
mysql-5.7Ubuntu:Pro:16.04:LTS From an advisory covering 4 CVEs |
before 5.7.40-0ubuntu0.16.04.1+esm1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1 Show 26 moreShow less5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm2 |
5.7.40-0ubuntu0.16.04.1+esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-21589 is a medium vulnerability (CVSS 4.3) in Oracle Mysql, published October 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.13%, the 66th percentile. Fixed in mysql-5.7 5.7.40-0ubuntu0.16.04.1+esm1.
References
oracle.com/security-alerts/cpuoct2022.html
security.netapp.com/advisory/ntap-20221028-0013
nvd.nist.gov/vuln/detail/CVE-2022-21589
github.com/advisories/GHSA-hwfp-8w72-6fqv
errata.cloudlinux.com/ubuntu16-els/CLSA-2022-1669240747
github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21589.json
Show 194 moreShow less
access.redhat.com/errata/RHSA-2019:2484
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1666738
bugzilla.redhat.com/show_bug.cgi?id=1666740
bugzilla.redhat.com/show_bug.cgi?id=1666741
bugzilla.redhat.com/show_bug.cgi?id=1666742
bugzilla.redhat.com/show_bug.cgi?id=1666743
bugzilla.redhat.com/show_bug.cgi?id=1666744
bugzilla.redhat.com/show_bug.cgi?id=1666745
bugzilla.redhat.com/show_bug.cgi?id=1666746
bugzilla.redhat.com/show_bug.cgi?id=1666747
bugzilla.redhat.com/show_bug.cgi?id=1666748
bugzilla.redhat.com/show_bug.cgi?id=1666749
bugzilla.redhat.com/show_bug.cgi?id=1666750
bugzilla.redhat.com/show_bug.cgi?id=1666751
bugzilla.redhat.com/show_bug.cgi?id=1666753
bugzilla.redhat.com/show_bug.cgi?id=1666755
bugzilla.redhat.com/show_bug.cgi?id=1666756
bugzilla.redhat.com/show_bug.cgi?id=1666757
bugzilla.redhat.com/show_bug.cgi?id=1666758
bugzilla.redhat.com/show_bug.cgi?id=1666759
bugzilla.redhat.com/show_bug.cgi?id=1666760
bugzilla.redhat.com/show_bug.cgi?id=1666761
bugzilla.redhat.com/show_bug.cgi?id=1666762
bugzilla.redhat.com/show_bug.cgi?id=1666763
bugzilla.redhat.com/show_bug.cgi?id=1666764
bugzilla.redhat.com/show_bug.cgi?id=1702958
bugzilla.redhat.com/show_bug.cgi?id=1702959
bugzilla.redhat.com/show_bug.cgi?id=1702960
bugzilla.redhat.com/show_bug.cgi?id=1702961
bugzilla.redhat.com/show_bug.cgi?id=1702962
bugzilla.redhat.com/show_bug.cgi?id=1702963
bugzilla.redhat.com/show_bug.cgi?id=1702964
bugzilla.redhat.com/show_bug.cgi?id=1702965
bugzilla.redhat.com/show_bug.cgi?id=1702966
bugzilla.redhat.com/show_bug.cgi?id=1702967
bugzilla.redhat.com/show_bug.cgi?id=1702968
bugzilla.redhat.com/show_bug.cgi?id=1702969
bugzilla.redhat.com/show_bug.cgi?id=1702970
bugzilla.redhat.com/show_bug.cgi?id=1702971
bugzilla.redhat.com/show_bug.cgi?id=1702972
bugzilla.redhat.com/show_bug.cgi?id=1702973
bugzilla.redhat.com/show_bug.cgi?id=1702974
bugzilla.redhat.com/show_bug.cgi?id=1702975
bugzilla.redhat.com/show_bug.cgi?id=1702976
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2484.json
access.redhat.com/security/cve/CVE-2019-2420
cve.org/CVERecord?id=CVE-2019-2420
nvd.nist.gov/vuln/detail/CVE-2019-2420
oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
access.redhat.com/security/cve/CVE-2019-2434
cve.org/CVERecord?id=CVE-2019-2434
nvd.nist.gov/vuln/detail/CVE-2019-2434
access.redhat.com/security/cve/CVE-2019-2436
cve.org/CVERecord?id=CVE-2019-2436
nvd.nist.gov/vuln/detail/CVE-2019-2436
access.redhat.com/security/cve/CVE-2019-2455
cve.org/CVERecord?id=CVE-2019-2455
nvd.nist.gov/vuln/detail/CVE-2019-2455
access.redhat.com/security/cve/CVE-2019-2481
cve.org/CVERecord?id=CVE-2019-2481
nvd.nist.gov/vuln/detail/CVE-2019-2481
access.redhat.com/security/cve/CVE-2019-2482
cve.org/CVERecord?id=CVE-2019-2482
nvd.nist.gov/vuln/detail/CVE-2019-2482
access.redhat.com/security/cve/CVE-2019-2486
cve.org/CVERecord?id=CVE-2019-2486
nvd.nist.gov/vuln/detail/CVE-2019-2486
access.redhat.com/security/cve/CVE-2019-2494
cve.org/CVERecord?id=CVE-2019-2494
nvd.nist.gov/vuln/detail/CVE-2019-2494
access.redhat.com/security/cve/CVE-2019-2495
cve.org/CVERecord?id=CVE-2019-2495
nvd.nist.gov/vuln/detail/CVE-2019-2495
access.redhat.com/security/cve/CVE-2019-2502
cve.org/CVERecord?id=CVE-2019-2502
nvd.nist.gov/vuln/detail/CVE-2019-2502
access.redhat.com/security/cve/CVE-2019-2503
cve.org/CVERecord?id=CVE-2019-2503
nvd.nist.gov/vuln/detail/CVE-2019-2503
access.redhat.com/security/cve/CVE-2019-2507
cve.org/CVERecord?id=CVE-2019-2507
nvd.nist.gov/vuln/detail/CVE-2019-2507
access.redhat.com/security/cve/CVE-2019-2510
cve.org/CVERecord?id=CVE-2019-2510
nvd.nist.gov/vuln/detail/CVE-2019-2510
access.redhat.com/security/cve/CVE-2019-2528
cve.org/CVERecord?id=CVE-2019-2528
nvd.nist.gov/vuln/detail/CVE-2019-2528
access.redhat.com/security/cve/CVE-2019-2529
cve.org/CVERecord?id=CVE-2019-2529
nvd.nist.gov/vuln/detail/CVE-2019-2529
access.redhat.com/security/cve/CVE-2019-2530
cve.org/CVERecord?id=CVE-2019-2530
nvd.nist.gov/vuln/detail/CVE-2019-2530
access.redhat.com/security/cve/CVE-2019-2531
cve.org/CVERecord?id=CVE-2019-2531
nvd.nist.gov/vuln/detail/CVE-2019-2531
access.redhat.com/security/cve/CVE-2019-2532
cve.org/CVERecord?id=CVE-2019-2532
nvd.nist.gov/vuln/detail/CVE-2019-2532
access.redhat.com/security/cve/CVE-2019-2533
cve.org/CVERecord?id=CVE-2019-2533
nvd.nist.gov/vuln/detail/CVE-2019-2533
access.redhat.com/security/cve/CVE-2019-2534
cve.org/CVERecord?id=CVE-2019-2534
nvd.nist.gov/vuln/detail/CVE-2019-2534
access.redhat.com/security/cve/CVE-2019-2535
cve.org/CVERecord?id=CVE-2019-2535
nvd.nist.gov/vuln/detail/CVE-2019-2535
access.redhat.com/security/cve/CVE-2019-2536
cve.org/CVERecord?id=CVE-2019-2536
nvd.nist.gov/vuln/detail/CVE-2019-2536
access.redhat.com/security/cve/CVE-2019-2537
cve.org/CVERecord?id=CVE-2019-2537
nvd.nist.gov/vuln/detail/CVE-2019-2537
access.redhat.com/security/cve/CVE-2019-2539
cve.org/CVERecord?id=CVE-2019-2539
nvd.nist.gov/vuln/detail/CVE-2019-2539
access.redhat.com/security/cve/CVE-2019-2580
cve.org/CVERecord?id=CVE-2019-2580
nvd.nist.gov/vuln/detail/CVE-2019-2580
oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
access.redhat.com/security/cve/CVE-2019-2581
cve.org/CVERecord?id=CVE-2019-2581
nvd.nist.gov/vuln/detail/CVE-2019-2581
access.redhat.com/security/cve/CVE-2019-2584
cve.org/CVERecord?id=CVE-2019-2584
nvd.nist.gov/vuln/detail/CVE-2019-2584
access.redhat.com/security/cve/CVE-2019-2585
cve.org/CVERecord?id=CVE-2019-2585
nvd.nist.gov/vuln/detail/CVE-2019-2585
access.redhat.com/security/cve/CVE-2019-2587
cve.org/CVERecord?id=CVE-2019-2587
nvd.nist.gov/vuln/detail/CVE-2019-2587
access.redhat.com/security/cve/CVE-2019-2589
cve.org/CVERecord?id=CVE-2019-2589
nvd.nist.gov/vuln/detail/CVE-2019-2589
access.redhat.com/security/cve/CVE-2019-2592
cve.org/CVERecord?id=CVE-2019-2592
nvd.nist.gov/vuln/detail/CVE-2019-2592
access.redhat.com/security/cve/CVE-2019-2593
cve.org/CVERecord?id=CVE-2019-2593
nvd.nist.gov/vuln/detail/CVE-2019-2593
access.redhat.com/security/cve/CVE-2019-2596
cve.org/CVERecord?id=CVE-2019-2596
nvd.nist.gov/vuln/detail/CVE-2019-2596
access.redhat.com/security/cve/CVE-2019-2606
cve.org/CVERecord?id=CVE-2019-2606
nvd.nist.gov/vuln/detail/CVE-2019-2606
access.redhat.com/security/cve/CVE-2019-2607
cve.org/CVERecord?id=CVE-2019-2607
nvd.nist.gov/vuln/detail/CVE-2019-2607
access.redhat.com/security/cve/CVE-2019-2614
cve.org/CVERecord?id=CVE-2019-2614
nvd.nist.gov/vuln/detail/CVE-2019-2614
access.redhat.com/security/cve/CVE-2019-2617
cve.org/CVERecord?id=CVE-2019-2617
nvd.nist.gov/vuln/detail/CVE-2019-2617
access.redhat.com/security/cve/CVE-2019-2620
cve.org/CVERecord?id=CVE-2019-2620
nvd.nist.gov/vuln/detail/CVE-2019-2620
access.redhat.com/security/cve/CVE-2019-2623
cve.org/CVERecord?id=CVE-2019-2623
nvd.nist.gov/vuln/detail/CVE-2019-2623
access.redhat.com/security/cve/CVE-2019-2624
cve.org/CVERecord?id=CVE-2019-2624
nvd.nist.gov/vuln/detail/CVE-2019-2624
access.redhat.com/security/cve/CVE-2019-2625
cve.org/CVERecord?id=CVE-2019-2625
nvd.nist.gov/vuln/detail/CVE-2019-2625
cve.org/CVERecord?id=CVE-2019-2626
nvd.nist.gov/vuln/detail/CVE-2019-2626
oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2511.json
ubuntu.com/security/CVE-2022-21589
ubuntu.com/security/notices/USN-5696-1
ubuntu.com/security/notices/USN-5696-2
ubuntu.com/security/CVE-2022-21592
ubuntu.com/security/CVE-2022-21594
ubuntu.com/security/CVE-2022-21599
ubuntu.com/security/CVE-2022-21604
ubuntu.com/security/CVE-2022-21608
ubuntu.com/security/CVE-2022-21611
ubuntu.com/security/CVE-2022-21617
ubuntu.com/security/CVE-2022-21625
ubuntu.com/security/CVE-2022-21632
ubuntu.com/security/CVE-2022-21633
ubuntu.com/security/CVE-2022-21637
ubuntu.com/security/CVE-2022-21640
ubuntu.com/security/CVE-2022-39400
ubuntu.com/security/CVE-2022-39408
ubuntu.com/security/CVE-2022-39410
Left out here: 232 references. The JSON record has them.