USN-4651-1
mysql-8.0 vulnerabilities
Tom Reynolds discovered that due to a packaging error, the MySQL X Plugin was listening to all network interfaces by default, contrary to expectations.
This update changes the default MySQL configuration to bind the MySQL X Plugin to localhost only. This change may impact environments where the MySQL X Plugin needs to be accessible from the network. The mysqlx-bind-address setting in the /etc/mysql/mysql.conf.d/mysqld.cnf file can be modified to allow network access.
What each source reports
OSV No score
mysql-8.0 vulnerabilities
Tom Reynolds discovered that due to a packaging error, the MySQL X Plugin was listening to all network interfaces by default, contrary to expectations.
This update changes the default MySQL configuration to bind the MySQL X Plugin to localhost only. This change may impact environments where the MySQL X Plugin needs to be accessible from the network. The mysqlx-bind-address setting in the /etc/mysql/mysql.conf.d/mysqld.cnf file can be modified to allow network access.
- Record
USN-4651-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-8.0Ubuntu:20.04:LTS |
before 8.0.22-0ubuntu0.20.04.3, plus listed versions 8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5 Show 8 moreShow less8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.2 |
8.0.22-0ubuntu0.20.04.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4651-1 is a vulnerability with no CVSS score yet in mysql-8.0, published November 30, 2020. No source lists public exploit code. Fixed in mysql-8.0 8.0.22-0ubuntu0.20.04.3.