MySQL -- Multiple vulnerabilities

2020-10-2000:00:00

vuxml.freebsd.org

oracle mysql

security patches

cvss v3.1

mariadb

specific cves

CVSS2

7.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

72.0%

JSON

Oracle reports:

This Critical Patch Update contains 48 new security patches for
Oracle MySQL.
The highest CVSS v3.1 Base Score of vulnerabilities affecting Oracle
MySQL is 8.
NOTE: MariaDB only contains CVE-2020-14812 CVE-2020-14765
CVE-2020-14776 and CVE-2020-14789

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmariadb103-server< 10.3.26UNKNOWN
FreeBSDanynoarchmariadb104-server< 10.4.16UNKNOWN
FreeBSDanynoarchmariadb105-server< 10.5.7UNKNOWN
FreeBSDanynoarchmysql56-server< 5.6.50UNKNOWN
FreeBSDanynoarchmysql57-server< 5.7.32UNKNOWN
FreeBSDanynoarchmysql80-server< 8.0.22UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	mariadb103-server	< 10.3.26	UNKNOWN
FreeBSD	any	noarch	mariadb104-server	< 10.4.16	UNKNOWN
FreeBSD	any	noarch	mariadb105-server	< 10.5.7	UNKNOWN
FreeBSD	any	noarch	mysql56-server	< 5.6.50	UNKNOWN
FreeBSD	any	noarch	mysql57-server	< 5.7.32	UNKNOWN
FreeBSD	any	noarch	mysql80-server	< 8.0.22	UNKNOWN