The version of MySQL running on the remote host is 8.0.x prior to 8.0.27. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the October 2021 Critical Patch Update advisory:

  - A vulnerability in the OpenSSL component that can result in a takeover of the MySQL server.
    (CVE-2021-3711)

  - An easily exploitable vulnerability in the Kerberos component of MySQL server that allows an     unauthenticated, remote attacker to affect availability. (CVE-2021-36222)

  - An easily exploitable vulnerability in the cURL component that allows an unauthenticated, remote attacker     to affect the availability of the MySQL Server. (CVE-2021-22926)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MySQL 8.0.x < 8.0.27 Multiple Vulnerabilities (Oct 2021 CPU)

critical Nessus Plugin ID 154258

Version 1.8

Version 1.7

Version 1.6

Version 1.8 Apr 18, 2025, 9:45 PM Detection (allow combined detections) Plugin Feed: 202504182145
Version 1.7 Nov 28, 2023, 2:15 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202311281415
Version 1.6 Nov 2, 2023, 4:31 AM IAVM reference Plugin Feed: 202311020431