Yaoguang Chen

The issue is related to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS #7, or PKCS #12 are likely to be impacted. Email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution, and Evince, are believed to be impacted. The vulnerability may allow a remote attacker to execute arbitrary code.

The issue is related to errors in resource release in the MySQL Server product, specifically in the Server: Stored Procedure component. It allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server.

The issue is related to errors in resource release in the MySQL Server product, specifically in the Server: Parser component. It allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server.

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.26 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server. Recommendations: For versions 8.0.26 and prior, update to a version later than 8.0.26 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.26 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server. Recommendations: For versions 8.0.26 and prior, update to a version later than 8.0.26 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 19c, 21c Description: The issue affects the Core RDBMS component, allowing a low-privileged attacker with Create Table privilege and network access via Oracle Net to compromise Core RDBMS. This can result in a partial denial of service (partial DOS) of Core RDBMS. Recommendations: For versions 12.1.0.2, 12.2.0.1, 19c, 21c, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.26 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server. Recommendations: For versions 8.0.26 and prior, update to a version later than 8.0.26 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.26 and prior Description: A vulnerability in the MySQL Server product allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server. Recommendations: For versions 8.0.26 and prior, update to a version later than 8.0.26 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.26 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server. Recommendations: For versions 8.0.26 and prior, update to a version later than 8.0.26 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.26 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server. Recommendations: For versions 8.0.26 and prior, update to a version later than 8.0.26 to resolve the issue.

An issue in the component Arg comparator::compare real fixed was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. The vulnerability is related to the lack of protection measures for the SQL query structure, which can be exploited by a remote attacker to cause a denial of service using a specially crafted SQL request.

The issue is related to insufficient input validation in the Core RDBMS component of Oracle Database Server. This allows a low-privileged attacker with Create Table privilege and network access via Oracle Net to compromise Core RDBMS, potentially resulting in a partial denial of service.

The issue is related to errors in resource release in the MySQL Server: Optimizer component. It allows a remote attacker to cause a denial of service. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of the MySQL Server.

Name of the Vulnerable Software and Affected Versions: Cameralyzer versions prior to 3.2.1041 in 3.2.x Cameralyzer versions prior to 3.3.1040 in 3.3.x Cameralyzer versions prior to 3.4.4210 in 3.4.x Description: The issue is related to improper access control in Cameralyzer, allowing untrusted applications to access certain functions. Recommendations: For versions prior to 3.2.1041 in 3.2.x, update to version 3.2.1041 or later. For versions prior to 3.3.1040 in 3.3.x, update to version 3.3.1040 or later. For versions prior to 3.4.4210 in 3.4.x, update to version 3.4.4210 or later.

An issue in the component Field::set default of MariaDB Server was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. The vulnerability is related to the lack of protection measures for the SQL query structure, which can be exploited by a remote attacker to cause a denial of service using a specially crafted SQL request.

The issue is related to insufficient input validation in the JAPI component of the affected software, allowing an unauthenticated attacker with network access via HTTP to compromise Hyperion Analytic Provider Services. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products, potentially resulting in the takeover of Hyperion Analytic Provider Services.

The issue is related to errors in resource release in the MySQL Server: Optimizer component. It allows a remote attacker to cause a denial of service. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of the MySQL Server.

The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. It allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. It allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server.

The issue exists due to insufficient input validation in the Apache HTTP Server. Exploitation of this issue may allow a remote attacker to impact the integrity of protected information. The problem is related to unexpected matching behavior when 'MergeSlashes OFF' is set.