Every CVE Search/ Get API key

CVE-2023-22015

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

4.9 MediumFix available

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.05%Up 1.0 points since Oct 18, 2023
90%50%10%1%

What each source reports

CVE List Score used 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2023-22015
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2023-26180 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2023-26180
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-5v2h-8g8q-mwmw 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-5v2h-8g8q-mwmw
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2023-22015
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2023-22015
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVOESA-2023-1834 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21509)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.38 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21515)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21517)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21522)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21525)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21526)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are…

Record
OESA-2023-1834
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 14 moreShow less
OSVOESA-2023-1835 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21509)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.38 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21515)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21517)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21522)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21525)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21526)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are…

Record
OESA-2023-1835
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1836 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21509)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.38 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21515)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21517)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21522)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21525)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21526)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are…

Record
OESA-2023-1836
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2071 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Security Fix(es):

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.(CVE-2021-22570)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21412)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21413)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21414)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21417)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21418)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized…

Record
OESA-2024-2071
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1102 7.5

Red Hat Security Advisory: rh-mysql80-mysql security update

Record
RHSA-2023:1102
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2621 7.5

Red Hat Security Advisory: mysql security update

Record
RHSA-2023:2621
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:3087 7.5

Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update

Record
RHSA-2023:3087
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:3087 7.5

Important: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)

Security Fix(es):

  • mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)

  • mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)

  • mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)

  • mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)

  • mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)

  • mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)

  • mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)

  • mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)

  • mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Rocky Linux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)
Record
RLSA-2023:3087
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-22015 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
UBUNTU-CVE-2023-22015
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:3087 No score

Important: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)

Security Fix(es):

  • mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
  • mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
  • mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
  • mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
  • mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
  • mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
  • mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
  • mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
  • mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • AlmaLinux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)
Record
ALSA-2023:3087
Updated
2026-11-05
OSVCLSA-2023-1702573449 No score

Fix of 5 CVEs

  • SECURITY UPDATE: Update to 5.7.44 to fix security issues
    • CVE-2023-22053, CVE-2023-22084, CVE-2023-22015, CVE-2023-22026, CVE-2023-22028
Record
CLSA-2023-1702573449
Updated
2026-11-02
OSVCLSA-2023-1702573569 No score

Fix of 5 CVEs

  • SECURITY UPDATE: Update to 5.7.44 to fix security issues
    • CVE-2023-22053, CVE-2023-22084, CVE-2023-22015, CVE-2023-22026, CVE-2023-22028
  • debian/patches/off_root_tests.patch: disable mysqld_daemon and mysqld_safe tests under root due to known issues with these tests.
Record
CLSA-2023-1702573569
Updated
2026-11-02
OSVCLSA-2024-1719248287 No score

mysql: Fix of 51 CVEs

  • Update to MySQL 8.0.36
  • CVEs fixed: CVE-2023-21950 CVE-2023-22005 CVE-2023-22007 CVE-2023-22008 CVE-2023-22015 CVE-2023-22026 CVE-2023-22028 CVE-2023-22032 CVE-2023-22033 CVE-2023-22038 CVE-2023-22046 CVE-2023-22048 CVE-2023-22053 CVE-2023-22054 CVE-2023-22056 CVE-2023-22057 CVE-2023-22058 CVE-2023-22059 CVE-2023-22064 CVE-2023-22065 CVE-2023-22066 CVE-2023-22068 CVE-2023-22070 CVE-2023-22078 CVE-2023-22079 CVE-2023-22084 CVE-2023-22092 CVE-2023-22097 CVE-2023-22103 CVE-2023-22104 CVE-2023-22110 CVE-2023-22111 CVE-2023-22112 CVE-2023-22113 CVE-2023-22114 CVE-2023-22115 CVE-2024-20961 CVE-2024-20963 CVE-2024-20965 CVE-2024-20967 CVE-2024-20969 CVE-2024-20971 CVE-2024-20972 CVE-2024-20973 CVE-2024-20974 CVE-2024-20976 CVE-2024-20977 CVE-2024-20978 CVE-2024-20981 CVE-2024-20983 CVE-2024-20985
Record
CLSA-2024-1719248287
Updated
2026-11-02
OSVCLSA-2024-1719250628 No score

mysql: Fix of 51 CVEs

  • Update to MySQL 8.0.36
  • CVEs fixed: CVE-2023-21950 CVE-2023-22005 CVE-2023-22007 CVE-2023-22008 CVE-2023-22015 CVE-2023-22026 CVE-2023-22028 CVE-2023-22032 CVE-2023-22033 CVE-2023-22038 CVE-2023-22046 CVE-2023-22048 CVE-2023-22053 CVE-2023-22054 CVE-2023-22056 CVE-2023-22057 CVE-2023-22058 CVE-2023-22059 CVE-2023-22064 CVE-2023-22065 CVE-2023-22066 CVE-2023-22068 CVE-2023-22070 CVE-2023-22078 CVE-2023-22079 CVE-2023-22084 CVE-2023-22092 CVE-2023-22097 CVE-2023-22103 CVE-2023-22104 CVE-2023-22110 CVE-2023-22111 CVE-2023-22112 CVE-2023-22113 CVE-2023-22114 CVE-2023-22115 CVE-2024-20961 CVE-2024-20963 CVE-2024-20965 CVE-2024-20967 CVE-2024-20969 CVE-2024-20971 CVE-2024-20972 CVE-2024-20973 CVE-2024-20974 CVE-2024-20976 CVE-2024-20977 CVE-2024-20978 CVE-2024-20981 CVE-2024-20983 CVE-2024-20985
Record
CLSA-2024-1719250628
Updated
2026-11-02
OSVUSN-6288-2 No score

mysql-5.7 vulnerability

USN-6288-1 fixed a vulnerability in MySQL. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 5.7.43 in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-43.html https://www.oracle.com/security-alerts/cpujul2023.html

Record
USN-6288-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mecab
AlmaLinux:8
From an advisory covering 42 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-devel
AlmaLinux:8
From an advisory covering 42 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 42 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3340+d764b636
2.7.0.20070801-16.module_el8.6.0+3340+d764b636
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 42 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3340+d764b636
2.7.0.20070801-16.module_el8.6.0+3340+d764b636
mysql
AlmaLinux:8
From an advisory covering 42 CVEs
 before 8.0.32-1.module_el8.8.0+3567+56a616e4
8.0.32-1.module_el8.8.0+3567+56a616e4
mysql-common
AlmaLinux:8
From an advisory covering 42 CVEs
 before 8.0.32-1.module_el8.8.0+3567+56a616e4
8.0.32-1.module_el8.8.0+3567+56a616e4
mysql-devel
AlmaLinux:8
From an advisory covering 42 CVEs
 before 8.0.32-1.module_el8.8.0+3567+56a616e4
8.0.32-1.module_el8.8.0+3567+56a616e4
mysql-errmsg
AlmaLinux:8
From an advisory covering 42 CVEs
 before 8.0.32-1.module_el8.8.0+3567+56a616e4
8.0.32-1.module_el8.8.0+3567+56a616e4
mysql-libs
AlmaLinux:8
From an advisory covering 42 CVEs
 before 8.0.32-1.module_el8.8.0+3567+56a616e4
8.0.32-1.module_el8.8.0+3567+56a616e4
mysql-server
AlmaLinux:8
From an advisory covering 42 CVEs
 before 8.0.32-1.module_el8.8.0+3567+56a616e4
8.0.32-1.module_el8.8.0+3567+56a616e4
Show 107 moreShow less
Affected packages
PackageAffectedFixed
mysql-test
AlmaLinux:8
From an advisory covering 42 CVEs
 before 8.0.32-1.module_el8.8.0+3567+56a616e4
8.0.32-1.module_el8.8.0+3567+56a616e4
libmysqlclient-dev
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
libmysqlclient20
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
libmysqld-dev
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-client
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-client-5.7
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-client-core-5.7
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-common
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-server
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-server-5.7
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-server-core-5.7
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-source-5.7
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-testsuite
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
mysql-testsuite-5.7
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.16.04.1+tuxcare.els1
5.7.44-0ubuntu0.16.04.1+tuxcare.els1
libmysqlclient-dev
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
libmysqlclient20
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
libmysqld-dev
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-client
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-client-5.7
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-client-core-5.7
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-server
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-server-5.7
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-server-core-5.7
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-source-5.7
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-testsuite
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql-testsuite-5.7
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 5.7.44-0ubuntu0.18.04.1+tuxcare.els1
5.7.44-0ubuntu0.18.04.1+tuxcare.els1
mysql
TuxCare:CentOS:8.5
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
mysql-common
TuxCare:CentOS:8.5
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.5
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.5
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.5
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
mysql-server
TuxCare:CentOS:8.5
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
mysql-test
TuxCare:CentOS:8.5
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1
mysql
TuxCare:CentOS:8.4
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
mysql-common
TuxCare:CentOS:8.4
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.4
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.4
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.4
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
mysql-server
TuxCare:CentOS:8.4
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
mysql-test
TuxCare:CentOS:8.4
From an advisory covering 51 CVEs
 before 8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
8.0.36-1.module_el8.4.0+2185+8e651128.tuxcare.els1
mysql
openEuler:22.03-LTS-SP1
From an advisory covering 118 CVEs
 before 8.0.35-1.oe2203sp1
8.0.35-1.oe2203sp1
mysql
openEuler:22.03-LTS-SP2
From an advisory covering 118 CVEs
 before 8.0.35-1.oe2203sp2
8.0.35-1.oe2203sp2
mysql
openEuler:22.03-LTS
From an advisory covering 118 CVEs
 before 8.0.35-1.oe2203
8.0.35-1.oe2203
mysql
openEuler:20.03-LTS-SP4
From an advisory covering 218 CVEs
 before 8.0.38-1.oe2003sp4
8.0.38-1.oe2003sp4
rh-mysql80-mysql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-config-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-icu-data-files
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-server-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
rh-mysql80-mysql-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el7
0:8.0.32-1.el7
mysql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-errmsg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-server-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mysql-test-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 42 CVEs
 before 0:8.0.32-1.el9_2
0:8.0.32-1.el9_2
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:0.996-2.module+el8.8.0+18436+8918dd75
0:0.996-2.module+el8.8.0+18436+8918dd75
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:0.996-2.module+el8.8.0+18436+8918dd75
0:0.996-2.module+el8.8.0+18436+8918dd75
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:0.996-2.module+el8.8.0+18436+8918dd75
0:0.996-2.module+el8.8.0+18436+8918dd75
mecab-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:0.996-2.module+el8.8.0+18436+8918dd75
0:0.996-2.module+el8.8.0+18436+8918dd75
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 42 CVEs
 before 0:8.0.32-1.module+el8.8.0+18446+fca6280e
0:8.0.32-1.module+el8.8.0+18446+fca6280e
mecab
Rocky Linux:8
From an advisory covering 42 CVEs
 before 0:0.996-2.module+el8.10.0+1676+9b4b6e24
0:0.996-2.module+el8.10.0+1676+9b4b6e24
mecab
Rocky Linux:8
From an advisory covering 42 CVEs
 before 0:0.996-2.module+el8.10.0+2091+db4d14f6
0:0.996-2.module+el8.10.0+2091+db4d14f6
mecab
Rocky Linux:8
From an advisory covering 42 CVEs
 before 0:0.996-2.module+el8.10.0+1937+28fbbc83
0:0.996-2.module+el8.10.0+1937+28fbbc83
mecab-ipadic
Rocky Linux:8
From an advisory covering 42 CVEs
 before 0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24
0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
mysql-5.7
Ubuntu:Pro:16.04:LTS
 before 5.7.43-0ubuntu0.16.04.1+esm1, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 29 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm25.7.40-0ubuntu0.16.04.1+esm15.7.41-0ubuntu0.16.04.1+esm15.7.42-0ubuntu0.16.04.1+esm1
5.7.43-0ubuntu0.16.04.1+esm1
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mysql-5.7
Ubuntu:Pro:18.04:LTS
 before 5.7.43-0ubuntu0.18.04.1+esm1, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 21 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.25.7.40-0ubuntu0.18.04.15.7.41-0ubuntu0.18.04.15.7.42-0ubuntu0.18.04.1
5.7.43-0ubuntu0.18.04.1+esm1
mysql-8.0
Ubuntu:20.04:LTS
 before 8.0.32-0buntu0.20.04.1, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 20 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.18.0.31-0ubuntu0.20.04.2
8.0.32-0buntu0.20.04.1
mysql-8.0
Ubuntu:22.04:LTS
 before 8.0.32-0buntu0.22.04.1, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1
Show 4 moreShow less
8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.1
8.0.32-0buntu0.22.04.1
mysql-5.7
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 5.7.43-0ubuntu0.16.04.1+esm1, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 29 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm25.7.40-0ubuntu0.16.04.1+esm15.7.41-0ubuntu0.16.04.1+esm15.7.42-0ubuntu0.16.04.1+esm1
5.7.43-0ubuntu0.16.04.1+esm1
mysql-5.7
Ubuntu:Pro:18.04:LTS
From an advisory covering 3 CVEs
 before 5.7.43-0ubuntu0.18.04.1+esm1, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 21 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.25.7.40-0ubuntu0.18.04.15.7.41-0ubuntu0.18.04.15.7.42-0ubuntu0.18.04.1
5.7.43-0ubuntu0.18.04.1+esm1

History

History
RecordedChangedSources
affected
affected, aliases, facts, published, referencesOSV
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-22015 is a medium vulnerability (CVSS 4.9) in Oracle Mysql, published May 16, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.05%, the 64th percentile. Fixed in mysql-5.7 5.7.43-0ubuntu0.16.04.1+esm1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 217 references and the rest of 4 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open