openEuler 20.03 LTS SP4 update for mysql

1) Improper input validation

EUVDB-ID: #VU62403

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-22570

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Compiling (protobuf) component in MySQL Server. A remote non-authenticated attacker can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper input validation

EUVDB-ID: #VU62419

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21412

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Improper input validation

EUVDB-ID: #VU62417

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21413

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: DML component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Improper input validation

EUVDB-ID: #VU62420

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21414

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Improper input validation

EUVDB-ID: #VU62416

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21417

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Improper input validation

EUVDB-ID: #VU62415

Risk: Medium

CVSSv3.1: 4.4 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21418

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Improper input validation

EUVDB-ID: #VU62434

Risk: Low

CVSSv3.1: 2.4 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21423

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a remote privileged user to perform service disruption.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform service disruption.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Improper input validation

EUVDB-ID: #VU62410

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21425

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: DDL component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Improper input validation

EUVDB-ID: #VU62418

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21427

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: FTS component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Improper input validation

EUVDB-ID: #VU62421

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21435

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Improper input validation

EUVDB-ID: #VU62423

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21437

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Improper input validation

EUVDB-ID: #VU62424

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21438

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Improper input validation

EUVDB-ID: #VU62411

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21440

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Improper input validation

EUVDB-ID: #VU62429

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21444

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: DDL component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Improper input validation

EUVDB-ID: #VU62428

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21451

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Improper input validation

EUVDB-ID: #VU62404

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21454

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Group Replication Plugin component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Improper input validation

EUVDB-ID: #VU65522

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21455

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to manipulate data.

The vulnerability exists due to improper input validation within the Server: PAM Auth Plugin component in MySQL Server. A remote privileged user can exploit this vulnerability to manipulate data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Improper input validation

EUVDB-ID: #VU62409

Risk: Medium

CVSSv3.1: 5.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21457

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Server: PAM Auth Plugin component in MySQL Server. A remote non-authenticated attacker can exploit this vulnerability to gain access to sensitive information.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Improper input validation

EUVDB-ID: #VU62412

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21459

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Improper input validation

EUVDB-ID: #VU62426

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21462

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Improper input validation

EUVDB-ID: #VU62413

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21478

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Input validation error

EUVDB-ID: #VU62414

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21479

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input within the Optimizer component. A remote user can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Improper input validation

EUVDB-ID: #VU62405

Risk: Medium

CVSSv3.1: 5.5 [CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21482

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to execute arbitrary code.

The vulnerability exists due to improper input validation within the Cluster: General component in MySQL Cluster. A remote privileged user can exploit this vulnerability to execute arbitrary code.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Improper input validation

EUVDB-ID: #VU62406

Risk: Medium

CVSSv3.1: 5.5 [CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21483

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to execute arbitrary code.

The vulnerability exists due to improper input validation within the Cluster: General component in MySQL Cluster. A remote privileged user can exploit this vulnerability to execute arbitrary code.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Improper input validation

EUVDB-ID: #VU62431

Risk: Low

CVSSv3.1: 2.6 [CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21484

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a remote privileged user to read memory contents or crash the application.

The vulnerability exists due to improper input validation within the Cluster: General component in MySQL Cluster. A remote privileged user can exploit this vulnerability to read memory contents or crash the application.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) Improper input validation

EUVDB-ID: #VU62432

Risk: Low

CVSSv3.1: 2.6 [CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21485

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a remote privileged user to read memory contents or crash the application.

The vulnerability exists due to improper input validation within the Cluster: General component in MySQL Cluster. A remote privileged user can exploit this vulnerability to read memory contents or crash the application.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Improper input validation

EUVDB-ID: #VU62433

Risk: Low

CVSSv3.1: 2.6 [CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21486

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a remote privileged user to read memory contents or crash the application.

The vulnerability exists due to improper input validation within the Cluster: General component in MySQL Cluster. A remote privileged user can exploit this vulnerability to read memory contents or crash the application.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Buffer overflow

EUVDB-ID: #VU62407

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21489

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing Data Node jobs. A remote user can send specially crafted request to the database, trigger a buffer overflow and execute arbitrary code on the system.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Improper input validation

EUVDB-ID: #VU62408

Risk: Medium

CVSSv3.1: 5.5 [CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21490

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to execute arbitrary code.

The vulnerability exists due to improper input validation when parsing Data Node jobs. A remote privileged user can exploit this vulnerability to execute arbitrary code.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Improper input validation

EUVDB-ID: #VU65510

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21509

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Improper input validation

EUVDB-ID: #VU65521

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21515

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Options component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Improper input validation

EUVDB-ID: #VU65512

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21517

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Improper input validation

EUVDB-ID: #VU65515

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21525

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) Improper input validation

EUVDB-ID: #VU65516

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21526

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Improper input validation

EUVDB-ID: #VU65508

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21527

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Improper input validation

EUVDB-ID: #VU65509

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21528

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

37) Improper input validation

EUVDB-ID: #VU65517

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21529

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

38) Improper input validation

EUVDB-ID: #VU65518

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21530

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

39) Improper input validation

EUVDB-ID: #VU65519

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21531

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

40) Improper input validation

EUVDB-ID: #VU65523

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21534

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Stored Procedure component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

41) Improper input validation

EUVDB-ID: #VU65513

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21537

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

42) Improper input validation

EUVDB-ID: #VU65526

Risk: Low

CVSSv3.1: 2.7 [CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21538

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform service disruption.

The vulnerability exists due to improper input validation within the Server: Security: Encryption component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform service disruption.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

43) Improper input validation

EUVDB-ID: #VU65511

Risk: Medium

CVSSv3.1: 4.4 [CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21539

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to read and manipulate data.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote authenticated user can exploit this vulnerability to read and manipulate data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

44) Improper input validation

EUVDB-ID: #VU65514

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21547

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Federated component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

45) Improper input validation

EUVDB-ID: #VU65504

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21556

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

46) Improper input validation

EUVDB-ID: #VU65505

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21569

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

47) Improper input validation

EUVDB-ID: #VU68463

Risk: Low

CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21592

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Server: Security: Encryption component in MySQL Server. A remote authenticated user can exploit this vulnerability to gain access to sensitive information.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

48) Improper input validation

EUVDB-ID: #VU68451

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21594

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

49) Improper input validation

EUVDB-ID: #VU68460

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21599

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Stored Procedure component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

50) Improper input validation

EUVDB-ID: #VU68447

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21604

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

51) Improper input validation

EUVDB-ID: #VU68450

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21605

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Data Dictionary component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

52) Improper input validation

EUVDB-ID: #VU68452

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21607

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

53) Improper input validation

EUVDB-ID: #VU68453

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21608

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

54) Improper input validation

EUVDB-ID: #VU68467

Risk: Low

CVSSv3.1: 3.6 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21611

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A local privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

55) Improper input validation

EUVDB-ID: #VU68449

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21617

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Connection Handling component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

56) Improper input validation

EUVDB-ID: #VU68462

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21625

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

57) Improper input validation

EUVDB-ID: #VU68459

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21632

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Security: Privileges component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

58) Improper input validation

EUVDB-ID: #VU68458

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21633

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Replication component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

59) Improper input validation

EUVDB-ID: #VU68444

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21635

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

60) Improper input validation

EUVDB-ID: #VU68448

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21637

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

61) Improper input validation

EUVDB-ID: #VU68454

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21638

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

62) Improper input validation

EUVDB-ID: #VU68455

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21640

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

63) Improper input validation

EUVDB-ID: #VU68456

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-21641

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

64) Expected behavior violation

EUVDB-ID: #VU68746

Risk: Medium

CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-32221

CWE-ID: CWE-440 - Expected Behavior Violation

Exploit availability: No

The vulnerability allows a remote attacker to force unexpected application behavior.

The vulnerability exists due to a logic error for a reused handle when processing subsequent HTTP PUT and POST requests. The libcurl can erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request, which used that callback. As a result, such behavior can influence application flow and force unpredictable outcome.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

65) Improper input validation

EUVDB-ID: #VU68457

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-39400

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

66) Improper input validation

EUVDB-ID: #VU68445

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-39408

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

67) Improper input validation

EUVDB-ID: #VU68446

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-39410

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

68) Security features bypass

EUVDB-ID: #VU70457

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-43551

CWE-ID: CWE-254 - Security Features

Exploit availability: No

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists in the way curl handles IDN characters in hostnames. The HSTS mechanism could be bypassed if the hostname in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Then in a subsequent request it does not detect the HSTS state and makes a clear text transfer.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

69) Use-after-free

EUVDB-ID: #VU71995

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-0215

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the BIO_new_NDEF function. A remote attacker can trigger a use-after-free error and perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

70) Improper input validation

EUVDB-ID: #VU71270

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21836

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: DML component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

71) Improper input validation

EUVDB-ID: #VU71272

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21863

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

72) Improper input validation

EUVDB-ID: #VU71273

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21864

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

73) Improper input validation

EUVDB-ID: #VU71274

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21865

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

74) Improper input validation

EUVDB-ID: #VU71275

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21866

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

75) Improper input validation

EUVDB-ID: #VU71276

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21867

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

76) Improper input validation

EUVDB-ID: #VU71262

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21868

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

77) Improper input validation

EUVDB-ID: #VU71265

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21869

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

78) Improper input validation

EUVDB-ID: #VU71277

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21870

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

79) Improper input validation

EUVDB-ID: #VU71269

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21871

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

80) Improper input validation

EUVDB-ID: #VU71268

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21872

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

81) Improper input validation

EUVDB-ID: #VU71278

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21873

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

82) Improper input validation

EUVDB-ID: #VU71286

Risk: Low

CVSSv3.1: 2.4 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21874

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform service disruption.

The vulnerability exists due to improper input validation within the Server: Thread Pooling component in MySQL Server. A remote privileged user can exploit this vulnerability to perform service disruption.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

83) Improper input validation

EUVDB-ID: #VU71264

Risk: Medium

CVSSv3.1: 5.2 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21875

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: Security: Encryption component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

84) Improper input validation

EUVDB-ID: #VU71279

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21876

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

85) Improper input validation

EUVDB-ID: #VU71266

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21877

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

86) Improper input validation

EUVDB-ID: #VU71280

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21878

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

87) Improper input validation

EUVDB-ID: #VU71281

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21879

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

88) Improper input validation

EUVDB-ID: #VU71267

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21880

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

89) Improper input validation

EUVDB-ID: #VU71282

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21881

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

90) Improper input validation

EUVDB-ID: #VU71285

Risk: Low

CVSSv3.1: 2.4 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21882

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to manipulate data.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to manipulate data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

91) Improper input validation

EUVDB-ID: #VU71283

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21883

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

92) Improper input validation

EUVDB-ID: #VU71271

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21887

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: GIS component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

93) Improper input validation

EUVDB-ID: #VU75275

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21911

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

94) Improper input validation

EUVDB-ID: #VU75270

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21912

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Security: Privileges component in MySQL Server. A remote non-authenticated attacker can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

95) Improper input validation

EUVDB-ID: #VU75281

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21913

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

96) Improper input validation

EUVDB-ID: #VU75282

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21917

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

97) Improper input validation

EUVDB-ID: #VU75277

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21919

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: DDL component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

98) Improper input validation

EUVDB-ID: #VU75283

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21920

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

99) Improper input validation

EUVDB-ID: #VU75273

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21929

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to damange or delete data.

The vulnerability exists due to improper input validation within the Server: DDL component in MySQL Server. A remote privileged user can exploit this vulnerability to damange or delete data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

100) Improper input validation

EUVDB-ID: #VU75278

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21933

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: DDL component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

101) Improper input validation

EUVDB-ID: #VU75284

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21935

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

102) Improper input validation

EUVDB-ID: #VU75291

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21940

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Components Services component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

103) Improper input validation

EUVDB-ID: #VU75285

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21945

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

104) Improper input validation

EUVDB-ID: #VU75272

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21946

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

105) Improper input validation

EUVDB-ID: #VU75292

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21947

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Components Services component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

106) Improper input validation

EUVDB-ID: #VU75289

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21953

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Partition component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

107) Improper input validation

EUVDB-ID: #VU75290

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21955

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Partition component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

108) Improper input validation

EUVDB-ID: #VU75276

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21962

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Components Services component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

109) Improper input validation

EUVDB-ID: #VU75293

Risk: Low

CVSSv3.1: 2.4 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21963

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform service disruption.

The vulnerability exists due to improper input validation within the Server: Connection Handling component in MySQL Server. A remote privileged user can exploit this vulnerability to perform service disruption.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

110) Improper input validation

EUVDB-ID: #VU75280

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21966

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: JSON component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

111) Improper input validation

EUVDB-ID: #VU75279

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21972

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: DML component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

112) Improper input validation

EUVDB-ID: #VU75286

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21976

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

113) Improper input validation

EUVDB-ID: #VU75287

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21977

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

114) Improper input validation

EUVDB-ID: #VU75271

Risk: Medium

CVSSv3.1: 6.2 [CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21980

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to execute arbitrary code.

The vulnerability exists due to improper input validation within the Client programs component in MySQL Server. A remote authenticated user can exploit this vulnerability to execute arbitrary code.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

115) Improper input validation

EUVDB-ID: #VU75288

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-21982

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

116) Improper input validation

EUVDB-ID: #VU78429

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22005

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Replication component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

117) Improper input validation

EUVDB-ID: #VU78425

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22007

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Replication component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

118) Improper input validation

EUVDB-ID: #VU78420

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22008

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

119) Improper input validation

EUVDB-ID: #VU82156

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22015

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

120) Improper input validation

EUVDB-ID: #VU82157

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22026

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

121) Improper input validation

EUVDB-ID: #VU82158

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22028

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

122) Improper input validation

EUVDB-ID: #VU82159

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22032

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

123) Improper input validation

EUVDB-ID: #VU78427

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22033

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

124) Improper input validation

EUVDB-ID: #VU78431

Risk: Low

CVSSv3.1: 2.4 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22038

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to manipulate data.

The vulnerability exists due to improper input validation within the Server: Security: Privileges component in MySQL Server. A remote privileged user can exploit this vulnerability to manipulate data.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

125) Improper input validation

EUVDB-ID: #VU78421

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22046

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

126) Improper input validation

EUVDB-ID: #VU78430

Risk: Low

CVSSv3.1: 2.7 [CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22048

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Server: Pluggable Auth component in MySQL Server. A remote authenticated user can exploit this vulnerability to gain access to sensitive information.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

127) Improper input validation

EUVDB-ID: #VU78419

Risk: Medium

CVSSv3.1: 5.2 [CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22053

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to access sensitive information or perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Client programs component in MySQL Server. A remote authenticated user can exploit this vulnerability to access sensitive information or perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

128) Improper input validation

EUVDB-ID: #VU78422

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22054

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

129) Improper input validation

EUVDB-ID: #VU78423

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22056

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

130) Improper input validation

EUVDB-ID: #VU78426

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22057

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Replication component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

131) Improper input validation

EUVDB-ID: #VU78428

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22058

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: DDL component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

132) Improper input validation

EUVDB-ID: #VU82146

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22059

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

133) Improper input validation

EUVDB-ID: #VU82160

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22064

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

134) Improper input validation

EUVDB-ID: #VU82161

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22065

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

135) Improper input validation

EUVDB-ID: #VU82150

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22066

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

136) Improper input validation

EUVDB-ID: #VU82151

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22068

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

137) Improper input validation

EUVDB-ID: #VU82162

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22070

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

138) Improper input validation

EUVDB-ID: #VU82166

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22078

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

139) Improper input validation

EUVDB-ID: #VU82147

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22079

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

140) Improper input validation

EUVDB-ID: #VU82154

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22084

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1

http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2071

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

141) Improper input validation

EUVDB-ID: #VU82167

Risk: Medium

CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22092

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Server: Optimizer component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 20.03 LTS SP4

mysql-test: before 8.0.38-1

mysql-server: before 8.0.38-1

mysql-libs: before 8.0.38-1

mysql-help: before 8.0.38-1

mysql-errmsg: before 8.0.38-1

mysql-devel: before 8.0.38-1

mysql-debugsource: before 8.0.38-1

mysql-debuginfo: before 8.0.38-1

mysql-config: before 8.0.38-1

mysql-common: before 8.0.38-1

mysql: before 8.0.38-1