The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6288-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to     fix these issues.

    MySQL has been updated to 8.0.34 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:

    https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-34.html https://www.oracle.com/security-     alerts/cpujul2023.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0066 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-22032:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22059:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows low     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22064:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22065:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22066:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22068:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22070:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22078:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22079:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows low privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22084:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 5.7.43 and prior, 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows     high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS     Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22092:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22097:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22103:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22104:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server.  Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22110:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22111:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).  Supported versions     that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22112:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22113:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).
    Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful     attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server     accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

    CVE-2023-22114:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.34 and prior and  8.1.0. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22115:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions     that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22038:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).
    Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful     attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL     Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

    CVE-2023-22046:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22048:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth).  Supported     versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in  unauthorized read access to a subset of MySQL Server accessible data.
    CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).

    CVE-2023-22053:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs).  Supported     versions that are affected are 5.7.42 and prior and  8.0.33 and prior. Difficult to exploit vulnerability     allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server and  unauthorized read access to a subset of MySQL Server     accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H).

    CVE-2023-22054:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22056:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22057:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).  Supported     versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22058:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).  Supported versions     that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22005:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).  Supported     versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22007:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).  Supported     versions that are affected are 5.7.41 and prior and  8.0.32 and prior. Easily exploitable vulnerability     allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS     Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22008:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server.  Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2023-22033:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server.  Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0351 advisory.

    This advisory aggregates security fixes for the mysql SRPM in CIQ LTS 8.8. It addresses 87 CVEs:
    CVE-2024-20978, CVE-2023-21977, CVE-2024-21053, CVE-2024-20968, CVE-2023-22058, and 82 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
179881	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : MySQL vulnerabilities (USN-6288-1)	Nessus	Ubuntu Local Security Checks	2023/8/15	2024/8/27	medium
238878	TencentOS Server 4: mysql (TSSA-2024:0066)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	medium
354715	Rocky Linux 8.8 [CIQ] Security Update: mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0351)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high

検出

プラグインの検索

medium

medium

high