Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors as well as unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions     that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require     human interaction from a person other than the attacker. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL     Connectors as well as unauthorized update, insert or delete access to some of MySQL Connectors accessible     data and unauthorized read access to a subset of MySQL Connectors accessible data. (CVE-2023-21971)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2979-1 advisory.

    - CVE-2023-21971: Fixed a denial-of-service vulnerability in the java.sql.DriverManager.getConnection()     method when used with untrusted inputs (bsc#1211247).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2241-1 advisory.

    - CVE-2023-21971: Fixed a crash in MySQL Connectors that could be       triggered by an authenticated remote user (bsc#1211247).

    - Ship protobuf 3.9.2 compatible generated files to support       older distro versions.

    - Update to 8.0.32:

      - MysqlDataSource fails to URL encode database name when constructing JDBC URL.
      - serverSideStatementCache ignores resultSetType.
      - UpdatableResultSet does not properly handle unsigned primary key.
      - Connector/J 8 query with explain can not return ResultRow.
      - Add support to row alias on INSERT... ON DUPLICATE KEY UPDATE on batch mode.
      - connectionCollation ignored if characterEncoding is set.
      - Connector/J rejects UNION with CTE.
      - Malformed packet generation for `COM_STMT_EXECUTE`.
      - Connector/J client hangs after prepare & execute process with old version server.
      - Contribution: Fix name of relocation POM file.
      - Contribution: [PATCH] Remove superfluous use of boxing.
      - Contribution: Recognize 'ON DUPLICATE KEY UPDATE' in 'INSERT SET' Statement.
      - RPM and DEB builds broken after introducing javadoc for maven bundles.
      - Sonatype compliant POM and maven bundles.
      - Upgrade 3rd party libraries and tools.
      - Upgrade Protocol Buffers dependency to protobuf-java-3.21.9.

    - As Oracle renamed the package to 'mysql-connector-j', we are       'providing' both names for now, but the package has to be renamed       to accommodate the change because the old name will be deprecated       at some point in the future without further notice.

    - Update to 8.0.31:

      Functionality Added or Changed

        * Important Change: To comply with proper naming guidelines, the           Maven groupId and artifactId for Connector/J have been changed           to the following starting with this release:
            groupId: com.mysql             artifactId: mysql-connector-j
        * The old groupId and artifactId can still be used for linking           the Connector/J library, but they will point to a Maven           relocation POM, redirecting users to the new coordinates.
          Please switch to the new coordinates as soon as possible, as           the old coordinates could be discontinued anytime without           notice. See Installing Connector/J Using Maven.
        * Also, to go with these changes, the .jar library for           Connector/J has been renamed to mysql-connector-j-x.y.z for           all channels of distribution by Oracle, not just the Maven           repository.
        * Before release 8.0.29, Connector/J always interpolated byte           arrays as hexadecimal literals when obtaining a prepared           statement's string representation by the toString() method.
          Since 8.0.29, all byte array values were displayed as
          ** BYTE ARRAY DATA ** when converted to strings. The same is           also true for null values.
        * To allow different ways to display byte array data and null           values, a new connection property, maxByteArrayAsHex, has been           introduced: byte arrays shorter than the value of           maxByteArrayAsHex are now shown as hexadecimal literals like           before release 8.0.29. Any byte arrays longer than this value           are interpolated generically as ** BYTE ARRAY DATA **.

      Bugs Fixed

        * X DevAPI: When parsing a string into a JSON string, some           escape character sequences were not parsed properly, causing           the Server to throw a com.mysql.cj.exceptions.WrongArgumentException           when receiving the JSON value. This fix ensures that escape           sequences are handled properly.
        * X DevAPI: When using the modify() method on JSON documents,           any backslashes inside a literal to be used for the modification           were lost. This fix corrects the mistakes in the expression           parser that caused the issue.
        * Executing a PreparedStatment after applying setFetchSize(0) on           it caused an ArrayIndexOutOfBoundsException.
        * Due to some old limitations, when used with Java applets,           Connector/J found out the default character set on a system by           various workarounds like reading the system property           file.encoding, using an OutpuStreamWriter, etc. With this fix,           Connector/J now uses Charset.defaultCharset(), the standard           method for the purpose.

    - Update to 8.0.30:

      Functionality Added or Changed

        * X DevAPI: For document-modifying methods that are chained           after modify() and take a document path expression as one of           its arguments (that is, set(), unset(), arrayInsert(),           arrayAppend()), Connector/J now throws an error when the           document path is empty or is a null string.

      Bugs Fixed

        * Historically, MySQL Server has used utf8 as an alias for           utf8mb3. Since release 8.0.29, utf8mb3 has become a recognized           (though deprecated) character set on its own for MySQL Server           and to make things consistent, in release 8.0.30, any           collations prefixed with utf8_ are now prefixed with utf8mb3_           instead. To go with that change, Connector/J has updated its           character set and collation mapping accordingly in this           release, and users are encouraged to update to Connector/J           8.0.30 to avoid potential issues when working with MySQL           Server 8.0.30 or later.
        * A few links in the CONTRIBUTING.md file in the distribution           packages were broken. They have now been fixed or removed.
        * The description for the connection property           rewriteBatchedStatements has been corrected, removing the           limitation that server-sided prepared statements could not           take advantage of the rewrite option.
        * A spelling error has been fixed in the source file for the           PropertyDefinitions class. Thanks to Weijie Wu for           contributing the fix.
        * DatabaseMetaData.getTypeInfo always returned false for           AUTO_INCREMENT for all data types. With this fix, Connector/J           returns the correct value for each data type. Also, the           missing types DOUBLE UNSIGNED and DOUBLE PRECISION UNSIGNED           have been added to the ResultSet.
        * Contrary to the the MySQL requirement for comments,           Connector/J did not require a whitespace (or a control           character such as a newline) after '--' to mark the beginning           of a comment within a SQL statement. This fix aligns           Connector/J with the MySQL requirement.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f504a8d2-e105-11ed-85f6-84a93843eb75 advisory.

  - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a     large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some     common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g.,     see the nodejs/node reference). (CVE-2022-37434)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL     Server. (CVE-2023-21911)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).
    Supported versions that are affected are 5.7.41 and prior and 8.0.30 and prior. Easily exploitable     vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2023-21912)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-21913)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-21917)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions     that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-21919, CVE-2023-21933)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21976, CVE-2023-21977,     CVE-2023-21982)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions     that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server     accessible data. (CVE-2023-21929)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).
    Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2023-21940, CVE-2023-21947)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows low privileged     attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-21946)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported     versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-21953, CVE-2023-21955)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).
    Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2023-21962)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling).
    Supported versions that are affected are 5.7.40 and prior and 8.0.31 and prior. Easily exploitable     vulnerability allows high privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a     partial denial of service (partial DOS) of MySQL Server. (CVE-2023-21963)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions     that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-21966)

  - Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions     that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require     human interaction from a person other than the attacker. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL     Connectors as well as unauthorized update, insert or delete access to some of MySQL Connectors accessible     data and unauthorized read access to a subset of MySQL Connectors accessible data. (CVE-2023-21971)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions     that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. (CVE-2023-21972)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions     that are affected are 5.7.41 and prior and 8.0.32 and prior. Difficult to exploit vulnerability allows low     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks require human interaction from a person other than the attacker. Successful attacks of this     vulnerability can result in takeover of MySQL Server. (CVE-2023-21980)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of MySQL Java Connectors installed on the remote host are affected by a vulnerability as referenced in the April 2023 CPU advisory. Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors as well as unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized read access to a subset of MySQL Connectors accessible data.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
252543	Linux Distros Unpatched Vulnerability : CVE-2023-21971	Nessus	Misc.	Local	medium
178931	openSUSE 15 Security Update : mysql-connector-java (SUSE-SU-2023:2979-1)	Nessus	SuSE Local Security Checks	Local	medium
176100	openSUSE 15 Security Update : mysql-connector-java (SUSE-SU-2023:2241-1)	Nessus	SuSE Local Security Checks	Local	medium
174664	FreeBSD : MySQL -- Multiple vulnerabilities (f504a8d2-e105-11ed-85f6-84a93843eb75)	Nessus	FreeBSD Local Security Checks	Local	critical
174468	Oracle MySQL Java Connectors (Apr 2023 CPU)	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2023-21971

medium

Tenable Plugins

medium

medium

medium

critical

medium