The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported     versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable     vulnerability allows high privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2020-14672)

Note that Nessus relies on the presence of the package as reported by the vendor.

**MySQL 8.0.22**

Release notes :

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-22.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3590 advisory.

    mysql     [8.0.26-1]
    - Update to MySQL 8.0.26

    [8.0.25-1]
    - Update to MySQL 8.0.25

    [8.0.24-1]
    - Update to MySQL 8.0.24
    - Upstreamed patch: mysql-main-cast.patch

    [8.0.23-1]
    - Update to MySQL 8.0.23
    - Created mysql-fix-includes-robin-hood.patch
    - Created mysql-main-cast.patch

    [8.0.22-1]
    - Update to MySQL 8.0.22
    - mysql-certs-expired.patch patched by upstream
    - New zlib_decompress binary file in test package

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202105-27 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could possibly execute arbitrary code with the privileges of       the process, escalate privileges, gain access to critical data or       complete access to all MySQL server accessible data, or cause a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Oracle MySQL 的 MySQL Server 產品中存有弱點 (元件：Server: Stored Procedure)。受到影響的支援版本是 5.6.49 與先前的版本、5.7.31 與先前的版本，以及 8.0.21 與先前的版本。攻擊此弱點的難度較小，經由多個通訊協定存取網路的高特權攻擊者可藉此入侵 MySQL 伺服器。若成功攻擊此弱點，未經授權即可造成 MySQL 伺服器懸置或經常重複性當機 (完全 DOS)。(CVE-2020-14672)

請注意，Nessus 依賴供應商報告的套件存在。

遠端主機受到 GLSA-202105-27 中所述的弱點影響 (MySQL：多個弱點)

    在 MySQL 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。
  影響：

    攻擊者可能以處理程序的權限執行任意程式碼、取得存取重要資料的權限或存取所有 MySQL 伺服器可存取資料的完整權限，或造成拒絕服務情形。
  因應措施：

    目前尚無已知的因應措施。

ID	Name	Product	Family	Published	Updated	Severity
236338	Alibaba Cloud Linux 3 : 0220: mysql:8.0 (ALINUX3-SA-2022:0220)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/15/2025	medium
244269	Linux Distros Unpatched Vulnerability : CVE-2020-14672	Nessus	Misc.	8/6/2025	8/6/2025	medium
142509	Fedora 33 : community-mysql (2020-eee64a579c)	Nessus	Fedora Local Security Checks	11/6/2020	2/9/2024	medium
153575	Oracle Linux 8 : mysql:8.0 (ELSA-2021-3590)	Nessus	Oracle Linux Local Security Checks	9/23/2021	11/28/2024	medium
156994	GLSA-202105-27 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/24/2022	1/16/2024	high
244269	Linux Distros 未修補的弱點：CVE-2020-14672	Nessus	Misc.	8/6/2025	8/6/2025	medium
153575	Oracle Linux 8：mysql：8.0 (ELSA-2021-3590)	Nessus	Oracle Linux Local Security Checks	9/23/2021	11/28/2024	medium
156994	GLSA-202105-27：MySQL：多個弱點	Nessus	Gentoo Local Security Checks	1/24/2022	1/16/2024	high

Detections

Analytics

Plugins Search

medium

medium

medium

medium

high

medium

medium

high