Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-61081 →

DEBIAN-CVE-2026-61081

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affecte...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 mariadb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.11.19-0+deb12u1"}]}]

Debian:13 mariadb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 mariadb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.9+ds-1"}]}]

Références

advisory security-tracker.debian.org