PatchTheCVEmysql vulnerabilities
Recent CVEs affecting mysql products. 8 tracked.
mysql has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2017-10-27. Highest priority: CVE-2009-5026 (score 57/100).
- CVE-2017-15945 HIGH 7.8 UPGRADE UPGRADE The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-clust
- CVE-2015-2575 MEDIUM 4.9 MITIGATE MITIGATE Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote a
- CVE-2013-1492 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact
- CVE-2012-2749 MEDIUM 4.0 DOWNGRADE DOWNGRADE MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of servi
- CVE-2012-2102 LOW 3.5 DOWNGRADE DOWNGRADE MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of servi
- CVE-2012-0882 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 an
- CVE-2012-0553 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact
- CVE-2009-5026 MEDIUM 6.8 DOWNGRADE DOWNGRADE The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain s
FAQ
How do I fix mysql vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mysql being exploited right now?
None of the tracked mysql CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mysql CVE should I patch first?
CVE-2009-5026 currently ranks highest (57/100): The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain s.