CVE-2023-22066

medium

Published 2024-03-05 · Modified 2024-02-20

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

5.5

Description

RHSA-2024:0894: mysql:8.0 security update (Moderate)

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Red Hat Errata — Red Hat Inc. · View original ↗ · Open-Errata-API

Description mysql: InnoDB unspecified vulnerability (CPU Oct 2023) CVSS v3: 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Errata / fixed releases ProductPackageAdvisoryReleased Red Hat Enterprise Linux 8mysql:8.0-8090020240126173013.a75119d5RHSA-2024:08942024-02-20T00:00:00Z Red Hat Enterprise Linux 9mysql-0:8.0.36-1.el9_3RHSA-2024:11412024-03-05T00:00:00Z Red Hat Software Collections for…

Description

mysql: InnoDB unspecified vulnerability (CPU Oct 2023)

CVSS v3: 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

Errata / fixed releases

Product	Package	Advisory	Released
Red Hat Enterprise Linux 8	`mysql:8.0-8090020240126173013.a75119d5`	RHSA-2024:0894	2024-02-20T00:00:00Z
Red Hat Enterprise Linux 9	`mysql-0:8.0.36-1.el9_3`	RHSA-2024:1141	2024-03-05T00:00:00Z
Red Hat Software Collections for Red Hat Enterprise Linux 7	`rh-mysql80-mysql-0:8.0.36-1.el7`	RHSA-2024:2619	2024-04-30T00:00:00Z

Package state

Product	Package	State
Red Hat Enterprise Linux 6	`mysql`	Not affected
Red Hat Enterprise Linux 7	`mariadb`	Not affected
Red Hat Enterprise Linux 8	`mariadb:10.3/mariadb`	Not affected
Red Hat Enterprise Linux 8	`mariadb:10.5/mariadb`	Not affected
Red Hat Enterprise Linux 9	`mariadb`	Not affected
Red Hat Software Collections	`rh-mariadb105-mariadb`	Not affected

Apply commands

bash fix

Apply RHSA-2024:0894 for Red Hat Enterprise Linux 8

yum update -y mysql:8
# or:
dnf upgrade -y mysql:8

Affected

Vendor	Product	Version
redhat	Red Hat Enterprise Linux 6	`Not affected`
redhat	Red Hat Enterprise Linux 7	`Not affected`
redhat	Red Hat Enterprise Linux 8	`Not affected`
redhat	Red Hat Enterprise Linux 8	`Not affected`
redhat	Red Hat Enterprise Linux 9	`Not affected`
redhat	Red Hat Software Collections	`Not affected`

OS impact

AlmaLinux Fixed 2 releases

Version	Status	Fixed in
9	Fixed	`mysql-errmsg-8.0.36-1.el9_3.x86_64.rpm`
8	Fixed	`mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.x86_64.rpm`

Debian Fixed 1 release

Version	Status	Fixed in
sid	Fixed	`8.0.35-1`

Red Hat Fixed 2 releases

Version	Status	Fixed in
9	Fixed	—
8	Fixed	—

Rocky Linux Fixed 1 release

Version	Status	Fixed in
8	Fixed	—

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.