SB20240417101 - Multiple vulnerabilities in MySQL Enterprise Backup

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20240417101

SB20240417101 - Multiple vulnerabilities in MySQL Enterprise Backup

Published: April 17, 2024

Security Bulletin ID SB20240417101
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 vulnerabilities.


1) Improper check for certificate revocation (CVE-ID: CVE-2024-0853)

CWE-ID: CWE-299 - Improper Check for Certificate Revocation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to bypass OCSP verification.

The vulnerability exists due to curl inadvertently keeps the SSL session ID for connections in its cache even when the verify status (OCSP stapling) test has failed. A subsequent transfer to the same hostname will be successful if the session ID cache is still fresh, which leads to skipping the verify status check. As a result, OCSP verification is always successful for all subsequent TLS sessions.


2) State Issues (CVE-ID: CVE-2023-6129)

CWE-ID: CWE-371 - State Issues

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an error in POLY1305 MAC (message authentication code) implementation on PowerPC CPU based platforms if the CPU provides vector instructions. A remote attacker can perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.

References