FreeBSDFC91F2EF-FD7B-11E9-A1C7-B499BAEBFEAFMySQL -- Multiple vulerabilities
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.025 Low
EPSS
Percentile
90.2%
Oracle reports:
This Critical Patch Update contains 31 new security fixes for
Oracle MySQL. 6 of these vulnerabilities may be remotely exploitable
without authentication, i.e., may be exploited over a network without
requiring user credentials.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | mariadb55-server | < 5.5.66 | UNKNOWN |
| FreeBSD | any | noarch | mariadb101-server | < 10.1.42 | UNKNOWN |
| FreeBSD | any | noarch | mariadb102-server | < 10.2.28 | UNKNOWN |
| FreeBSD | any | noarch | mariadb103-server | < 10.3.19 | UNKNOWN |
| FreeBSD | any | noarch | mariadb104-server | < 10.4.9 | UNKNOWN |
| FreeBSD | any | noarch | mysql56-server | < 5.6.46 | UNKNOWN |
| FreeBSD | any | noarch | mysql57-server | < 5.7.28 | UNKNOWN |
| FreeBSD | any | noarch | mysql80-server | < 8.0.18 | UNKNOWN |
| FreeBSD | any | noarch | percona55-server | < 5.5.66 | UNKNOWN |
| FreeBSD | any | noarch | percona56-server | < 5.6.46 | UNKNOWN |
Related
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.025 Low
EPSS
Percentile
90.2%