CVE-2024-21059
https://notcve.org/view.php?id=CVE-2024-21059
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Solaris. • https://www.oracle.com/security-alerts/cpuapr2024.html •
CVE-2024-21058
https://notcve.org/view.php?id=CVE-2024-21058
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise Unified Audit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Unified Audit accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). • https://www.oracle.com/security-alerts/cpuapr2024.html •
CVE-2024-21057 – mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2024)
https://notcve.org/view.php?id=CVE-2024-21057
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). • https://www.oracle.com/security-alerts/cpuapr2024.html https://access.redhat.com/security/cve/CVE-2024-21057 https://bugzilla.redhat.com/show_bug.cgi?id=2275446 • CWE-400: Uncontrolled Resource Consumption •
CVE-2024-21056 – mysql: Server: DML unspecified vulnerability (CPU Apr 2024)
https://notcve.org/view.php?id=CVE-2024-21056
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). • https://security.netapp.com/advisory/ntap-20240426-0012 https://www.oracle.com/security-alerts/cpuapr2024.html https://access.redhat.com/security/cve/CVE-2024-21056 https://bugzilla.redhat.com/show_bug.cgi?id=2275445 •
CVE-2024-21055 – mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2024)
https://notcve.org/view.php?id=CVE-2024-21055
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). • https://security.netapp.com/advisory/ntap-20240426-0011 https://www.oracle.com/security-alerts/cpuapr2024.html https://access.redhat.com/security/cve/CVE-2024-21055 https://bugzilla.redhat.com/show_bug.cgi?id=2275444 •