VDB
GHSA-x24r-xfh8-7ww8
GHSA-x24r-xfh8-7ww8
PUBLISHED
CVSS 8.100000381469727 HIGH
Record from GitHub Advisory Database · Published May 13, 2022
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.
Risk scores
CVSS 3.0
8.100000381469727
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Timeline
- May 13, 2022 CVE Published
- Apr 30, 2026 Distribution Patch (3 in total, the first dated here)
- Apr 30, 2026 Security Advisory (3 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-x24r-xfh8-7ww8
vulnetix vdb fixes GHSA-x24r-xfh8-7ww8
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-x24r-xfh8-7ww8/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://rhn.redhat.com/errata/RHSA-2016-1602.html url
- http://rhn.redhat.com/errata/RHSA-2016-1637.html url
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168 url
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html url
- http://www.securityfocus.com/bid/91902 url
- http://www.debian.org/security/2016/dsa-3624 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2016-3477 advisory
- http://rhn.redhat.com/errata/RHSA-2016-1480.html url
- http://rhn.redhat.com/errata/RHSA-2016-1603.html url
- http://www.securityfocus.com/bid/91787 url
- https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes url
- https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes url
- https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes url
- http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html url
- http://rhn.redhat.com/errata/RHSA-2016-1601.html url
- http://rhn.redhat.com/errata/RHSA-2016-1604.html url
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html url
- http://www.securitytracker.com/id/1036362 url
- http://www.ubuntu.com/usn/USN-3040-1 advisory
- http://www.debian.org/security/2016/dsa-3632 advisory