Approved changes feed: RSS · Atom

cpe:2.3:a:mysql:mysql:*:r1:*:*:*:*:*:*

part: a version: * update: r1

VendorMysql (ed5ca9e5-b35c-577b-a574-83118837ee82)
ProductMysql (1c8532fc-b850-5724-9963-04be22800b3e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mysql-8.0 purl2cpe 2026-06-01 10:17:11.982959
pkg:deb/ubuntu/mysql-8.0 purl2cpe 2026-06-01 10:17:11.982961
pkg:docker/mysql purl2cpe 2026-06-01 10:17:11.982963
pkg:github/mysql/mysql-server purl2cpe 2026-06-01 10:17:11.982965
pkg:rpm/centos/mysql-8.0 purl2cpe 2026-06-01 10:17:11.982967

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15945 vulnerable 2026-06-08 05:08:59.780441 Details available
The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.
Published: 2017-10-27T21:00:00.000Z
Updated: 2024-08-05T20:13:05.914Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.