Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1142-1

Опубликовано: 11 апр. 2022
Источник: suse-cvrf

Описание

Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues:

  • CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors (bsc#1195557).

Список пакетов

HPE Helion OpenStack 8
mysql-connector-java-8.0.25-5.13.1
SUSE Linux Enterprise Software Development Kit 12 SP5
mysql-connector-java-8.0.25-5.13.1
SUSE OpenStack Cloud 8
mysql-connector-java-8.0.25-5.13.1
SUSE OpenStack Cloud 9
mysql-connector-java-8.0.25-5.13.1
SUSE OpenStack Cloud Crowbar 8
mysql-connector-java-8.0.25-5.13.1
SUSE OpenStack Cloud Crowbar 9
mysql-connector-java-8.0.25-5.13.1

Ссылки

Описание

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).

Затронутые продукты
HPE Helion OpenStack 8:mysql-connector-java-8.0.25-5.13.1
SUSE Linux Enterprise Software Development Kit 12 SP5:mysql-connector-java-8.0.25-5.13.1
SUSE OpenStack Cloud 8:mysql-connector-java-8.0.25-5.13.1
SUSE OpenStack Cloud 9:mysql-connector-java-8.0.25-5.13.1
Ссылки