{"cves":[{"id":"CVE-2020-2763","published":"2020-04-15T14:15:00","updated_at":"2025-08-18T17:13:12.695954+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Replication). Supported versions that are affected are 5.6.47 and\nprior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable\nvulnerability allows high privileged attacker with network access via\nmultiple protocols to compromise MySQL Server. Successful attacks of this\nvulnerability can result in unauthorized ability to cause a hang or\nfrequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base\nScore 4.9 (Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL","https://ubuntu.com/security/notices/USN-4350-1","https://www.cve.org/CVERecord?id=CVE-2020-2763"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"released","description":"5.7.30-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.7.30","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"5.7.30-0ubuntu0.16.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"groovy","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8.0.20-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.20-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.20","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4350-1"],"notices":[{"id":"USN-4350-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2020-05-04T12:08:10.915888","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.80 in Ubuntu 19.10 and Ubuntu 20.04 LTS.\nUbuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.30.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-30.html\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html\n\nhttps://www.oracle.com/security-alerts/cpuapr2020.html\n","is_hidden":false,"release_packages":{"bionic":[{"name":"mysql-5.7","version":"5.7.30-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"mysql-8.0","version":"8.0.20-0ubuntu0.19.10.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"libmysqlclient21","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client-core-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-router","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server-core-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-source-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-testsuite","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-testsuite-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"}],"focal":[{"name":"mysql-8.0","version":"8.0.20-0ubuntu0.20.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"}],"xenial":[{"name":"mysql-5.7","version":"5.7.30-0ubuntu0.16.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-common","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2759","CVE-2020-2760","CVE-2020-2762","CVE-2020-2763","CVE-2020-2765","CVE-2020-2780","CVE-2020-2804","CVE-2020-2812","CVE-2020-2892","CVE-2020-2893","CVE-2020-2895","CVE-2020-2896","CVE-2020-2897","CVE-2020-2898","CVE-2020-2901","CVE-2020-2903","CVE-2020-2904","CVE-2020-2921","CVE-2020-2922","CVE-2020-2923","CVE-2020-2924","CVE-2020-2925","CVE-2020-2926","CVE-2020-2928","CVE-2020-2930"]}]},{"id":"CVE-2020-2762","published":"2020-04-15T14:15:00","updated_at":"2025-08-18T17:13:12.695954+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nInnoDB). Supported versions that are affected are 8.0.19 and prior. Easily\nexploitable vulnerability allows high privileged attacker with network\naccess via multiple protocols to compromise MySQL Server. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\nhang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS\n3.0 Base Score 4.9 (Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."},{"author":"mdeslaur","note":"MySQL 8.x only"}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL","https://ubuntu.com/security/notices/USN-4350-1","https://www.cve.org/CVERecord?id=CVE-2020-2762"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"groovy","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8.0.20-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.20-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.20","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4350-1"],"notices":[{"id":"USN-4350-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2020-05-04T12:08:10.915888","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.80 in Ubuntu 19.10 and Ubuntu 20.04 LTS.\nUbuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.30.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-30.html\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html\n\nhttps://www.oracle.com/security-alerts/cpuapr2020.html\n","is_hidden":false,"release_packages":{"bionic":[{"name":"mysql-5.7","version":"5.7.30-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"mysql-8.0","version":"8.0.20-0ubuntu0.19.10.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"libmysqlclient21","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client-core-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-router","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server-core-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-source-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-testsuite","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-testsuite-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"}],"focal":[{"name":"mysql-8.0","version":"8.0.20-0ubuntu0.20.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"}],"xenial":[{"name":"mysql-5.7","version":"5.7.30-0ubuntu0.16.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-common","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2759","CVE-2020-2760","CVE-2020-2762","CVE-2020-2763","CVE-2020-2765","CVE-2020-2780","CVE-2020-2804","CVE-2020-2812","CVE-2020-2892","CVE-2020-2893","CVE-2020-2895","CVE-2020-2896","CVE-2020-2897","CVE-2020-2898","CVE-2020-2901","CVE-2020-2903","CVE-2020-2904","CVE-2020-2921","CVE-2020-2922","CVE-2020-2923","CVE-2020-2924","CVE-2020-2925","CVE-2020-2926","CVE-2020-2928","CVE-2020-2930"]}]},{"id":"CVE-2020-2761","published":"2020-04-15T14:15:00","updated_at":"2025-08-18T17:13:12.695954+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Security: Privileges). Supported versions that are affected are\n8.0.18 and prior. Easily exploitable vulnerability allows high privileged\nattacker with network access via multiple protocols to compromise MySQL\nServer. Successful attacks of this vulnerability can result in unauthorized\nability to cause a hang or frequently repeatable crash (complete DOS) of\nMySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."},{"author":"mdeslaur","note":"MySQL 8.x only"}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL","https://www.cve.org/CVERecord?id=CVE-2020-2761"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8.0.19-0ubuntu0.19.10.3","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.19","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.19-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-2760","published":"2020-04-15T14:15:00","updated_at":"2025-08-18T17:13:07.100050+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nInnoDB). Supported versions that are affected are 5.7.29 and prior and\n8.0.19 and prior. Easily exploitable vulnerability allows high privileged\nattacker with network access via multiple protocols to compromise MySQL\nServer. Successful attacks of this vulnerability can result in unauthorized\nability to cause a hang or frequently repeatable crash (complete DOS) of\nMySQL Server as well as unauthorized update, insert or delete access to\nsome of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity\nand Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL","https://ubuntu.com/security/notices/USN-4350-1","https://ubuntu.com/security/notices/USN-4603-1","https://www.cve.org/CVERecord?id=CVE-2020-2760"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"bionic","status":"released","description":"1:10.1.47-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1:10.3.25-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"5.7.30-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.7.30","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"5.7.30-0ubuntu0.16.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"focal","status":"released","description":"8.0.20-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8.0.20-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.20","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4350-1","USN-4603-1"],"notices":[{"id":"USN-4350-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2020-05-04T12:08:10.915888","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.80 in Ubuntu 19.10 and Ubuntu 20.04 LTS.\nUbuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.30.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-30.html\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html\n\nhttps://www.oracle.com/security-alerts/cpuapr2020.html\n","is_hidden":false,"release_packages":{"bionic":[{"name":"mysql-5.7","version":"5.7.30-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"mysql-8.0","version":"8.0.20-0ubuntu0.19.10.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"libmysqlclient21","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client-core-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-router","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server-core-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-source-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-testsuite","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-testsuite-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"}],"focal":[{"name":"mysql-8.0","version":"8.0.20-0ubuntu0.20.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"}],"xenial":[{"name":"mysql-5.7","version":"5.7.30-0ubuntu0.16.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-common","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2759","CVE-2020-2760","CVE-2020-2762","CVE-2020-2763","CVE-2020-2765","CVE-2020-2780","CVE-2020-2804","CVE-2020-2812","CVE-2020-2892","CVE-2020-2893","CVE-2020-2895","CVE-2020-2896","CVE-2020-2897","CVE-2020-2898","CVE-2020-2901","CVE-2020-2903","CVE-2020-2904","CVE-2020-2921","CVE-2020-2922","CVE-2020-2923","CVE-2020-2924","CVE-2020-2925","CVE-2020-2926","CVE-2020-2928","CVE-2020-2930"]},{"id":"USN-4603-1","title":"MariaDB vulnerabilities","summary":"Several security issues were fixed in MariaDB.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart MariaDB to\nmake all the necessary changes.\n","references":[],"published":"2020-10-27T16:57:58.436568","description":"It was discovered that MariaDB didn't properly validate the content of a packet\nreceived from a server. A remote attacker could use this vulnerability to sent\na specialy crafted file to cause a denial of service. (CVE-2020-13249)\n\nIt was discovered that MariaDB has other security issues. An attacker can cause\na hang or frequently repeatable crash (denial of service). (CVE-2020-15180,\nCVE-2020-2752, CVE-2020-2760, CVE-2020-2812, CVE-2020-2814)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"mariadb-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","description":"MariaDB database","is_source":true},{"name":"libmariadbclient-dev","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmariadbclient-dev-compat","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmariadbclient18","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmariadbd-dev","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmariadbd18","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-client","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-client-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-client-core-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-common","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-connect","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-cracklib-password-check","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-gssapi-client","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-gssapi-server","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-mroonga","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-oqgraph","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-spider","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-tokudb","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-server","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-server-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-server-core-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-test","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-test-data","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"}],"focal":[{"name":"mariadb-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","description":"MariaDB database","is_source":true},{"name":"libmariadb-dev","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadb-dev-compat","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadb3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadbclient-dev","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadbd-dev","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadbd19","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-backup","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-client","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-client-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-client-core-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-common","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-connect","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-cracklib-password-check","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-gssapi-client","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-gssapi-server","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-mroonga","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-oqgraph","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-rocksdb","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-spider","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-tokudb","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-server","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-server-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-server-core-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-test","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-test-data","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2760","CVE-2020-13249","CVE-2020-2752","CVE-2020-15180","CVE-2020-2814","CVE-2020-2812"]}]},{"id":"CVE-2020-2759","published":"2020-04-15T14:15:00","updated_at":"2025-08-18T17:13:07.100050+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Replication). Supported versions that are affected are 8.0.19 and\nprior. Easily exploitable vulnerability allows high privileged attacker\nwith network access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."},{"author":"mdeslaur","note":"MySQL 8.x only"}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL","https://ubuntu.com/security/notices/USN-4350-1","https://www.cve.org/CVERecord?id=CVE-2020-2759"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"focal","status":"released","description":"8.0.20-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8.0.20-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.20","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.20-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4350-1"],"notices":[{"id":"USN-4350-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2020-05-04T12:08:10.915888","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.80 in Ubuntu 19.10 and Ubuntu 20.04 LTS.\nUbuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.30.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-30.html\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html\n\nhttps://www.oracle.com/security-alerts/cpuapr2020.html\n","is_hidden":false,"release_packages":{"bionic":[{"name":"mysql-5.7","version":"5.7.30-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.30-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"mysql-8.0","version":"8.0.20-0ubuntu0.19.10.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"libmysqlclient21","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-client-core-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-router","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-server-core-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-source-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-testsuite","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"},{"name":"mysql-testsuite-8.0","version":"8.0.20-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.19.10.1"}],"focal":[{"name":"mysql-8.0","version":"8.0.20-0ubuntu0.20.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.20-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.20-0ubuntu0.20.04.1","pocket":"security"}],"xenial":[{"name":"mysql-5.7","version":"5.7.30-0ubuntu0.16.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-common","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.30-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.30-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2759","CVE-2020-2760","CVE-2020-2762","CVE-2020-2763","CVE-2020-2765","CVE-2020-2780","CVE-2020-2804","CVE-2020-2812","CVE-2020-2892","CVE-2020-2893","CVE-2020-2895","CVE-2020-2896","CVE-2020-2897","CVE-2020-2898","CVE-2020-2901","CVE-2020-2903","CVE-2020-2904","CVE-2020-2921","CVE-2020-2922","CVE-2020-2923","CVE-2020-2924","CVE-2020-2925","CVE-2020-2926","CVE-2020-2928","CVE-2020-2930"]}]},{"id":"CVE-2020-2758","published":"2020-04-15T14:15:00","updated_at":"2025-08-26T12:23:24.929717+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core). Supported versions that are affected are Prior to\n5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable\nvulnerability allows high privileged attacker with logon to the\ninfrastructure where Oracle VM VirtualBox executes to compromise Oracle VM\nVirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may\nsignificantly impact additional products. Successful attacks of this\nvulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base\nScore 8.2 (Confidentiality, Integrity and Availability impacts). CVSS\nVector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.cve.org/CVERecord?id=CVE-2020-2758"],"bugs":[""],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"6.1.16-dfsg-6~ubuntu1.20.10.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"6.1.16-dfsg-6~ubuntu1.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.1.6-dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-2757","published":"2020-04-15T14:15:00","updated_at":"2025-08-25T23:25:03.951656+00:00","description":"\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE\n(component: Serialization). Supported versions that are affected are Java\nSE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to\nexploit vulnerability allows unauthenticated attacker with network access\nvia multiple protocols to compromise Java SE, Java SE Embedded. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Java SE, Java SE Embedded. Note:\nApplies to client and server deployment of Java. This vulnerability can be\nexploited through sandboxed Java Web Start applications and sandboxed Java\napplets. It can also be exploited by supplying data to APIs in the\nspecified Component without using sandboxed Java Web Start applications or\nsandboxed Java applets, such as through a web service. CVSS 3.0 Base Score\n3.7 (Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":3.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://ubuntu.com/security/notices/USN-4337-1","https://www.cve.org/CVERecord?id=CVE-2020-2757"],"bugs":[""],"patches":{"openjdk-14":[],"openjdk-lts":[],"openjdk-8":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-14","source":"https://ubuntu.com/security/cve?package=openjdk-14","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-14","debian":"https://tracker.debian.org/pkg/openjdk-14","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"14.0.1+7-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u252-b09-1~18.04","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8u252-b09-1~19.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"8u252-b09-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8u252-b09-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u252-b09-1~16.04","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.7+10-2ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"11.0.7+10-2ubuntu2~19.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.7+10-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"11.0.7+10-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4337-1"],"notices":[{"id":"USN-4337-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2020-04-22T15:32:45.588246","description":"It was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice while processing a specially crafted regular expression.\n(CVE-2020-2754, CVE-2020-2755)\n\nIt was discovered that OpenJDK incorrectly handled class descriptors and\ncatching exceptions during object stream deserialization. An attacker could\npossibly use this issue to cause a denial of service while processing a\nspecially crafted serialized input. (CVE-2020-2756, CVE-2020-2757)\n\nBengt Jonsson, Juraj Somorovsky, Kostis Sagonas, Paul Fiterau Brostean and\nRobert Merget discovered that OpenJDK incorrectly handled certificate messages\nduring TLS handshake. An attacker could possibly use this issue to bypass\ncertificate verification and insert, edit or obtain sensitive information. This\nissue only affected OpenJDK 11. (CVE-2020-2767)\n\nIt was discovered that OpenJDK incorrectly handled exceptions thrown by\nunmarshalKeyInfo() and unmarshalXMLSignature(). An attacker could possibly use\nthis issue to cause a denial of service while reading key info or XML signature\ndata from XML input. (CVE-2020-2773)\n\nPeter Dettman discovered that OpenJDK incorrectly handled SSLParameters in\nsetAlgorithmConstraints(). An attacker could possibly use this issue to\noverride the defined systems security policy and lead to the use of weak\ncrypto algorithms that should be disabled. This issue only affected\nOpenJDK 11. (CVE-2020-2778)\n\nSimone Bordet discovered that OpenJDK incorrectly re-used single null TLS\nsessions for new TLS connections. A remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2020-2781)\n\nDan Amodio discovered that OpenJDK did not restrict the use of CR and LF\ncharacters in values for HTTP headers. An attacker could possibly use this\nissue to insert, edit or obtain sensitive information. (CVE-2020-2800)\n\nNils Emmerich discovered that OpenJDK incorrectly checked boundaries or\nargument types. An attacker could possibly use this issue to bypass sandbox\nrestrictions causing unspecified impact. (CVE-2020-2803, CVE-2020-2805)\n\nIt was discovered that OpenJDK incorrectly handled application data packets\nduring TLS handshake. An attacker could possibly use this issue to insert,\nedit or obtain sensitive information. This issue only affected OpenJDK 11.\n(CVE-2020-2816)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-2830)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-8","version":"8u252-b09-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.7+10-2ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-8-demo","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"}],"eoan":[{"name":"openjdk-8","version":"8u252-b09-1~19.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.7+10-2ubuntu2~19.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-doc","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jdk","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jdk-headless","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre-headless","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre-zero","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-source","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-8-demo","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-doc","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-source","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"}],"xenial":[{"name":"openjdk-8","version":"8u252-b09-1~16.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-jamvm","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2754","CVE-2020-2755","CVE-2020-2756","CVE-2020-2757","CVE-2020-2767","CVE-2020-2773","CVE-2020-2778","CVE-2020-2781","CVE-2020-2800","CVE-2020-2803","CVE-2020-2805","CVE-2020-2816","CVE-2020-2830"]}]},{"id":"CVE-2020-2756","published":"2020-04-15T14:15:00","updated_at":"2025-08-25T23:25:03.951656+00:00","description":"\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE\n(component: Serialization). Supported versions that are affected are Java\nSE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to\nexploit vulnerability allows unauthenticated attacker with network access\nvia multiple protocols to compromise Java SE, Java SE Embedded. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Java SE, Java SE Embedded. Note:\nApplies to client and server deployment of Java. This vulnerability can be\nexploited through sandboxed Java Web Start applications and sandboxed Java\napplets. It can also be exploited by supplying data to APIs in the\nspecified Component without using sandboxed Java Web Start applications or\nsandboxed Java applets, such as through a web service. CVSS 3.0 Base Score\n3.7 (Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":3.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://ubuntu.com/security/notices/USN-4337-1","https://www.cve.org/CVERecord?id=CVE-2020-2756"],"bugs":[""],"patches":{"openjdk-14":[],"openjdk-lts":[],"openjdk-8":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-14","source":"https://ubuntu.com/security/cve?package=openjdk-14","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-14","debian":"https://tracker.debian.org/pkg/openjdk-14","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"14.0.1+7-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u252-b09-1~18.04","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8u252-b09-1~19.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"8u252-b09-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8u252-b09-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u252-b09-1~16.04","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.7+10-2ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"11.0.7+10-2ubuntu2~19.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.7+10-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"11.0.7+10-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4337-1"],"notices":[{"id":"USN-4337-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2020-04-22T15:32:45.588246","description":"It was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice while processing a specially crafted regular expression.\n(CVE-2020-2754, CVE-2020-2755)\n\nIt was discovered that OpenJDK incorrectly handled class descriptors and\ncatching exceptions during object stream deserialization. An attacker could\npossibly use this issue to cause a denial of service while processing a\nspecially crafted serialized input. (CVE-2020-2756, CVE-2020-2757)\n\nBengt Jonsson, Juraj Somorovsky, Kostis Sagonas, Paul Fiterau Brostean and\nRobert Merget discovered that OpenJDK incorrectly handled certificate messages\nduring TLS handshake. An attacker could possibly use this issue to bypass\ncertificate verification and insert, edit or obtain sensitive information. This\nissue only affected OpenJDK 11. (CVE-2020-2767)\n\nIt was discovered that OpenJDK incorrectly handled exceptions thrown by\nunmarshalKeyInfo() and unmarshalXMLSignature(). An attacker could possibly use\nthis issue to cause a denial of service while reading key info or XML signature\ndata from XML input. (CVE-2020-2773)\n\nPeter Dettman discovered that OpenJDK incorrectly handled SSLParameters in\nsetAlgorithmConstraints(). An attacker could possibly use this issue to\noverride the defined systems security policy and lead to the use of weak\ncrypto algorithms that should be disabled. This issue only affected\nOpenJDK 11. (CVE-2020-2778)\n\nSimone Bordet discovered that OpenJDK incorrectly re-used single null TLS\nsessions for new TLS connections. A remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2020-2781)\n\nDan Amodio discovered that OpenJDK did not restrict the use of CR and LF\ncharacters in values for HTTP headers. An attacker could possibly use this\nissue to insert, edit or obtain sensitive information. (CVE-2020-2800)\n\nNils Emmerich discovered that OpenJDK incorrectly checked boundaries or\nargument types. An attacker could possibly use this issue to bypass sandbox\nrestrictions causing unspecified impact. (CVE-2020-2803, CVE-2020-2805)\n\nIt was discovered that OpenJDK incorrectly handled application data packets\nduring TLS handshake. An attacker could possibly use this issue to insert,\nedit or obtain sensitive information. This issue only affected OpenJDK 11.\n(CVE-2020-2816)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-2830)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-8","version":"8u252-b09-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.7+10-2ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-8-demo","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"}],"eoan":[{"name":"openjdk-8","version":"8u252-b09-1~19.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.7+10-2ubuntu2~19.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-doc","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jdk","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jdk-headless","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre-headless","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre-zero","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-source","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-8-demo","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-doc","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-source","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"}],"xenial":[{"name":"openjdk-8","version":"8u252-b09-1~16.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-jamvm","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2754","CVE-2020-2755","CVE-2020-2756","CVE-2020-2757","CVE-2020-2767","CVE-2020-2773","CVE-2020-2778","CVE-2020-2781","CVE-2020-2800","CVE-2020-2803","CVE-2020-2805","CVE-2020-2816","CVE-2020-2830"]}]},{"id":"CVE-2020-2755","published":"2020-04-15T14:15:00","updated_at":"2025-08-25T23:25:03.951656+00:00","description":"\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE\n(component: Scripting). Supported versions that are affected are Java SE:\n8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit\nvulnerability allows unauthenticated attacker with network access via\nmultiple protocols to compromise Java SE, Java SE Embedded. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Java SE, Java SE Embedded. Note:\nApplies to client and server deployment of Java. This vulnerability can be\nexploited through sandboxed Java Web Start applications and sandboxed Java\napplets. It can also be exploited by supplying data to APIs in the\nspecified Component without using sandboxed Java Web Start applications or\nsandboxed Java applets, such as through a web service. CVSS 3.0 Base Score\n3.7 (Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":3.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://ubuntu.com/security/notices/USN-4337-1","https://www.cve.org/CVERecord?id=CVE-2020-2755"],"bugs":[""],"patches":{"openjdk-14":[],"openjdk-lts":[],"openjdk-8":[]},"tags":{},"packages":[{"name":"openjdk-14","source":"https://ubuntu.com/security/cve?package=openjdk-14","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-14","debian":"https://tracker.debian.org/pkg/openjdk-14","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"14.0.1+7-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u252-b09-1~18.04","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8u252-b09-1~19.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"8u252-b09-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8u252-b09-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u252-b09-1~16.04","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.7+10-2ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"11.0.7+10-2ubuntu2~19.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.7+10-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"11.0.7+10-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4337-1"],"notices":[{"id":"USN-4337-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2020-04-22T15:32:45.588246","description":"It was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice while processing a specially crafted regular expression.\n(CVE-2020-2754, CVE-2020-2755)\n\nIt was discovered that OpenJDK incorrectly handled class descriptors and\ncatching exceptions during object stream deserialization. An attacker could\npossibly use this issue to cause a denial of service while processing a\nspecially crafted serialized input. (CVE-2020-2756, CVE-2020-2757)\n\nBengt Jonsson, Juraj Somorovsky, Kostis Sagonas, Paul Fiterau Brostean and\nRobert Merget discovered that OpenJDK incorrectly handled certificate messages\nduring TLS handshake. An attacker could possibly use this issue to bypass\ncertificate verification and insert, edit or obtain sensitive information. This\nissue only affected OpenJDK 11. (CVE-2020-2767)\n\nIt was discovered that OpenJDK incorrectly handled exceptions thrown by\nunmarshalKeyInfo() and unmarshalXMLSignature(). An attacker could possibly use\nthis issue to cause a denial of service while reading key info or XML signature\ndata from XML input. (CVE-2020-2773)\n\nPeter Dettman discovered that OpenJDK incorrectly handled SSLParameters in\nsetAlgorithmConstraints(). An attacker could possibly use this issue to\noverride the defined systems security policy and lead to the use of weak\ncrypto algorithms that should be disabled. This issue only affected\nOpenJDK 11. (CVE-2020-2778)\n\nSimone Bordet discovered that OpenJDK incorrectly re-used single null TLS\nsessions for new TLS connections. A remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2020-2781)\n\nDan Amodio discovered that OpenJDK did not restrict the use of CR and LF\ncharacters in values for HTTP headers. An attacker could possibly use this\nissue to insert, edit or obtain sensitive information. (CVE-2020-2800)\n\nNils Emmerich discovered that OpenJDK incorrectly checked boundaries or\nargument types. An attacker could possibly use this issue to bypass sandbox\nrestrictions causing unspecified impact. (CVE-2020-2803, CVE-2020-2805)\n\nIt was discovered that OpenJDK incorrectly handled application data packets\nduring TLS handshake. An attacker could possibly use this issue to insert,\nedit or obtain sensitive information. This issue only affected OpenJDK 11.\n(CVE-2020-2816)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-2830)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-8","version":"8u252-b09-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.7+10-2ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-8-demo","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"}],"eoan":[{"name":"openjdk-8","version":"8u252-b09-1~19.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.7+10-2ubuntu2~19.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-doc","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jdk","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jdk-headless","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre-headless","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre-zero","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-source","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-8-demo","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-doc","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-source","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"}],"xenial":[{"name":"openjdk-8","version":"8u252-b09-1~16.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-jamvm","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2754","CVE-2020-2755","CVE-2020-2756","CVE-2020-2757","CVE-2020-2767","CVE-2020-2773","CVE-2020-2778","CVE-2020-2781","CVE-2020-2800","CVE-2020-2803","CVE-2020-2805","CVE-2020-2816","CVE-2020-2830"]}]},{"id":"CVE-2020-2754","published":"2020-04-15T14:15:00","updated_at":"2025-08-25T23:25:03.951656+00:00","description":"\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE\n(component: Scripting). Supported versions that are affected are Java SE:\n8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit\nvulnerability allows unauthenticated attacker with network access via\nmultiple protocols to compromise Java SE, Java SE Embedded. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Java SE, Java SE Embedded. Note:\nApplies to client and server deployment of Java. This vulnerability can be\nexploited through sandboxed Java Web Start applications and sandboxed Java\napplets. It can also be exploited by supplying data to APIs in the\nspecified Component without using sandboxed Java Web Start applications or\nsandboxed Java applets, such as through a web service. CVSS 3.0 Base Score\n3.7 (Availability impacts). CVSS Vector:\n(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":3.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://ubuntu.com/security/notices/USN-4337-1","https://www.cve.org/CVERecord?id=CVE-2020-2754"],"bugs":[""],"patches":{"openjdk-14":[],"openjdk-lts":[],"openjdk-8":[]},"tags":{},"packages":[{"name":"openjdk-14","source":"https://ubuntu.com/security/cve?package=openjdk-14","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-14","debian":"https://tracker.debian.org/pkg/openjdk-14","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"14.0.1+7-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u252-b09-1~18.04","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8u252-b09-1~19.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"8u252-b09-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8u252-b09-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u252-b09-1~16.04","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.7+10-2ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"11.0.7+10-2ubuntu2~19.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.7+10-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"11.0.7+10-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4337-1"],"notices":[{"id":"USN-4337-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2020-04-22T15:32:45.588246","description":"It was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice while processing a specially crafted regular expression.\n(CVE-2020-2754, CVE-2020-2755)\n\nIt was discovered that OpenJDK incorrectly handled class descriptors and\ncatching exceptions during object stream deserialization. An attacker could\npossibly use this issue to cause a denial of service while processing a\nspecially crafted serialized input. (CVE-2020-2756, CVE-2020-2757)\n\nBengt Jonsson, Juraj Somorovsky, Kostis Sagonas, Paul Fiterau Brostean and\nRobert Merget discovered that OpenJDK incorrectly handled certificate messages\nduring TLS handshake. An attacker could possibly use this issue to bypass\ncertificate verification and insert, edit or obtain sensitive information. This\nissue only affected OpenJDK 11. (CVE-2020-2767)\n\nIt was discovered that OpenJDK incorrectly handled exceptions thrown by\nunmarshalKeyInfo() and unmarshalXMLSignature(). An attacker could possibly use\nthis issue to cause a denial of service while reading key info or XML signature\ndata from XML input. (CVE-2020-2773)\n\nPeter Dettman discovered that OpenJDK incorrectly handled SSLParameters in\nsetAlgorithmConstraints(). An attacker could possibly use this issue to\noverride the defined systems security policy and lead to the use of weak\ncrypto algorithms that should be disabled. This issue only affected\nOpenJDK 11. (CVE-2020-2778)\n\nSimone Bordet discovered that OpenJDK incorrectly re-used single null TLS\nsessions for new TLS connections. A remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2020-2781)\n\nDan Amodio discovered that OpenJDK did not restrict the use of CR and LF\ncharacters in values for HTTP headers. An attacker could possibly use this\nissue to insert, edit or obtain sensitive information. (CVE-2020-2800)\n\nNils Emmerich discovered that OpenJDK incorrectly checked boundaries or\nargument types. An attacker could possibly use this issue to bypass sandbox\nrestrictions causing unspecified impact. (CVE-2020-2803, CVE-2020-2805)\n\nIt was discovered that OpenJDK incorrectly handled application data packets\nduring TLS handshake. An attacker could possibly use this issue to insert,\nedit or obtain sensitive information. This issue only affected OpenJDK 11.\n(CVE-2020-2816)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-2830)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-8","version":"8u252-b09-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.7+10-2ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.7+10-2ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~18.04","pocket":"security"},{"name":"openjdk-8-demo","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u252-b09-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~18.04","pocket":"security"}],"eoan":[{"name":"openjdk-8","version":"8u252-b09-1~19.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.7+10-2ubuntu2~19.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-doc","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jdk","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jdk-headless","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre-headless","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-jre-zero","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-11-source","version":"11.0.7+10-2ubuntu2~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.7+10-2ubuntu2~19.10"},{"name":"openjdk-8-demo","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-doc","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~19.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"},{"name":"openjdk-8-source","version":"8u252-b09-1~19.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~19.10"}],"xenial":[{"name":"openjdk-8","version":"8u252-b09-1~16.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-jamvm","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u252-b09-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u252-b09-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1~16.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2754","CVE-2020-2755","CVE-2020-2756","CVE-2020-2757","CVE-2020-2767","CVE-2020-2773","CVE-2020-2778","CVE-2020-2781","CVE-2020-2800","CVE-2020-2803","CVE-2020-2805","CVE-2020-2816","CVE-2020-2830"]}]},{"id":"CVE-2020-2752","published":"2020-04-15T14:15:00","updated_at":"2025-08-18T17:13:07.100050+00:00","description":"\nVulnerability in the MySQL Client product of Oracle MySQL (component: C\nAPI). Supported versions that are affected are 5.6.47 and prior, 5.7.27 and\nprior and 8.0.17 and prior. Difficult to exploit vulnerability allows low\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Client. Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Client. CVSS 3.0 Base Score 5.3 (Availability\nimpacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL","https://ubuntu.com/security/notices/USN-4603-1","https://www.cve.org/CVERecord?id=CVE-2020-2752"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1:10.1.47-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1:10.3.25-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"5.7.28-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.7.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"5.7.28-0ubuntu0.16.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"8.0.18-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.18","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8.0.18-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4603-1"],"notices":[{"id":"USN-4603-1","title":"MariaDB vulnerabilities","summary":"Several security issues were fixed in MariaDB.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart MariaDB to\nmake all the necessary changes.\n","references":[],"published":"2020-10-27T16:57:58.436568","description":"It was discovered that MariaDB didn't properly validate the content of a packet\nreceived from a server. A remote attacker could use this vulnerability to sent\na specialy crafted file to cause a denial of service. (CVE-2020-13249)\n\nIt was discovered that MariaDB has other security issues. An attacker can cause\na hang or frequently repeatable crash (denial of service). (CVE-2020-15180,\nCVE-2020-2752, CVE-2020-2760, CVE-2020-2812, CVE-2020-2814)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"mariadb-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","description":"MariaDB database","is_source":true},{"name":"libmariadbclient-dev","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmariadbclient-dev-compat","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmariadbclient18","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmariadbd-dev","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmariadbd18","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-client","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-client-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-client-core-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-common","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-connect","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-cracklib-password-check","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-gssapi-client","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-gssapi-server","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-mroonga","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-oqgraph","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-spider","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-plugin-tokudb","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-server","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-server-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-server-core-10.1","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-test","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"},{"name":"mariadb-test-data","version":"1:10.1.47-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.47-0ubuntu0.18.04.1","pocket":"security"}],"focal":[{"name":"mariadb-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","description":"MariaDB database","is_source":true},{"name":"libmariadb-dev","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadb-dev-compat","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadb3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadbclient-dev","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadbd-dev","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"libmariadbd19","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-backup","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-client","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-client-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-client-core-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-common","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-connect","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-cracklib-password-check","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-gssapi-client","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-gssapi-server","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-mroonga","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-oqgraph","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-rocksdb","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-spider","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-plugin-tokudb","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-server","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-server-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-server-core-10.3","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-test","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"},{"name":"mariadb-test-data","version":"1:10.3.25-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3","version_link":"https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-2760","CVE-2020-13249","CVE-2020-2752","CVE-2020-15180","CVE-2020-2814","CVE-2020-2812"]}]},{"id":"CVE-2020-2748","published":"2020-04-15T14:15:00","updated_at":"2025-08-26T12:23:24.929717+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core). Supported versions that are affected are Prior to\n5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable\nvulnerability allows high privileged attacker with logon to the\ninfrastructure where Oracle VM VirtualBox executes to compromise Oracle VM\nVirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may\nsignificantly impact additional products. Successful attacks of this\nvulnerability can result in unauthorized read access to a subset of Oracle\nVM VirtualBox accessible data. CVSS 3.0 Base Score 3.2 (Confidentiality\nimpacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":3.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.2,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.cve.org/CVERecord?id=CVE-2020-2748"],"bugs":[""],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.1.6-dfsg-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"6.1.16-dfsg-6~ubuntu1.20.04.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"6.1.16-dfsg-6~ubuntu1.20.10.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-2743","published":"2020-04-15T14:15:00","updated_at":"2025-08-26T12:23:24.929717+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core). Supported versions that are affected are Prior to\n5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable\nvulnerability allows high privileged attacker with logon to the\ninfrastructure where Oracle VM VirtualBox executes to compromise Oracle VM\nVirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may\nsignificantly impact additional products. Successful attacks of this\nvulnerability can result in unauthorized access to critical data or\ncomplete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base\nScore 6.0 (Confidentiality impacts). CVSS Vector:\n(CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.cve.org/CVERecord?id=CVE-2020-2743"],"bugs":[""],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.1.2-dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-2742","published":"2020-04-15T14:15:00","updated_at":"2025-08-26T12:23:24.929717+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core). Supported versions that are affected are Prior to\n5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable\nvulnerability allows high privileged attacker with logon to the\ninfrastructure where Oracle VM VirtualBox executes to compromise Oracle VM\nVirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may\nsignificantly impact additional products. Successful attacks of this\nvulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base\nScore 8.2 (Confidentiality, Integrity and Availability impacts). CVSS\nVector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.cve.org/CVERecord?id=CVE-2020-2742"],"bugs":[""],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.1.2-dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"6.1.4-dfsg-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-2741","published":"2020-04-15T14:15:00","updated_at":"2025-08-26T12:23:24.929717+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core). Supported versions that are affected are Prior to\n5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable\nvulnerability allows high privileged attacker with logon to the\ninfrastructure where Oracle VM VirtualBox executes to compromise Oracle VM\nVirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may\nsignificantly impact additional products. Successful attacks of this\nvulnerability can result in unauthorized access to critical data or\ncomplete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base\nScore 6.0 (Confidentiality impacts). CVSS Vector:\n(CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.cve.org/CVERecord?id=CVE-2020-2741"],"bugs":[""],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"6.1.16-dfsg-6~ubuntu1.20.04.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"6.1.16-dfsg-6~ubuntu1.20.10.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.1.6-dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"6.1.18-dfsg-5","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-10932","published":"2020-04-15T14:15:00","updated_at":"2025-07-11T07:43:12.572023+00:00","description":"\nAn issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before\n2.7.15. An attacker that can get precise enough side-channel measurements\ncan recover the long-term ECDSA private key by (1) reconstructing the\nprojective coordinate of the result of scalar multiplication by exploiting\nside channels in the conversion to affine coordinates; (2) using an attack\ndescribed by Naccache, Smart, and Stern in 2003 to recover a few bits of\nthe ephemeral scalar from those projective coordinates via several\nmeasurements; and (3) using a lattice attack to get from there to the\nlong-term ECDSA private key used for the signatures. Typically an attacker\nwould have sufficient access when attacking an SGX enclave and controlling\nthe untrusted OS.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.6-and-2.7.15-released","https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-04","https://tls.mbed.org/tech-updates/security-advisories","https://www.cve.org/CVERecord?id=CVE-2020-10932"],"bugs":[""],"patches":{"mbedtls":[]},"tags":{},"packages":[{"name":"mbedtls","source":"https://ubuntu.com/security/cve?package=mbedtls","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mbedtls","debian":"https://tracker.debian.org/pkg/mbedtls","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.0-1build1","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.28.0-1build1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.0-1build1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.28.0-1build1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.28.0-1build1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.16.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-10699","published":"2020-04-15T14:15:00","updated_at":"2025-08-25T23:17:19.390750+00:00","description":"\nA flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where\nthe socket used by targetclid was world-writable. If a system enables the\ntargetclid socket, a local attacker can use this flaw to modify the iSCSI\nconfiguration and escalate their privileges to root.","ubuntu_description":"","notes":[],"codename":null,"priority":"high","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/open-iscsi/targetcli-fb/issues/162","https://ubuntu.com/security/notices/USN-4871-1","https://www.cve.org/CVERecord?id=CVE-2020-10699"],"bugs":[""],"patches":{"targetcli-fb":[]},"tags":{},"packages":[{"name":"targetcli-fb","source":"https://ubuntu.com/security/cve?package=targetcli-fb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=targetcli-fb","debian":"https://tracker.debian.org/pkg/targetcli-fb","statuses":[{"release_codename":"upstream","status":"not-affected","description":"debian: Vulnerable code introduced later","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1:2.1.51-0ubuntu1+esm1","component":null,"pocket":"esm-apps"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1:2.1.53-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-4871-1"],"notices":[{"id":"USN-4871-1","title":"targetcli-fb vulnerabilities","summary":"Several security issues were fixed in targetcli-fb.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2021-03-15T23:00:07.971373","description":"It was discovered that targetcli-fb did not properly manage socket\npermissions. A local attacker could use this issue to modify the iSCSI\nconfiguration resulting in a denial of service, obtain sensitive \ninformation or execute arbitrary code. (CVE-2020-10699)\n\nIt was discovered that targetcli-fb did not properly manage permissions for \n/etc/target and underneath backup directory/files. An attacker could use\nthis issue to access sensitive information. (CVE-2020-13867)\n","is_hidden":false,"release_packages":{"focal":[{"name":"targetcli-fb","version":"1:2.1.51-0ubuntu1+esm1","description":"None","is_source":true},{"name":"targetcli-fb","version":"1:2.1.51-0ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/targetcli-fb","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2020-13867","CVE-2020-10699"]}]},{"id":"CVE-2020-11765","published":"2020-04-14T23:15:00","updated_at":"2025-08-25T23:18:04.432050+00:00","description":"\nAn issue was discovered in OpenEXR before 2.4.1. There is an off-by-one\nerror in use of the ImfXdr.h read function by\nDwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"possibly same commits as CVE-2020-11762, need to check"}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/project-zero/issues/detail?id=1987","https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020","https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1","https://ubuntu.com/security/notices/USN-4339-1","https://www.cve.org/CVERecord?id=CVE-2020-11765"],"bugs":[""],"patches":{"openexr":["upstream: https://github.com/AcademySoftwareFoundation/openexr/commit/3eda5d70aba127bae9bd6bae9956fcf024b64031","upstream: https://github.com/AcademySoftwareFoundation/openexr/commit/2ae5f8376b0a6c3e2bb100042f5de79503ba837a"]},"tags":{},"packages":[{"name":"openexr","source":"https://ubuntu.com/security/cve?package=openexr","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openexr","debian":"https://tracker.debian.org/pkg/openexr","statuses":[{"release_codename":"bionic","status":"released","description":"2.2.0-11.1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.2.1-4.1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.3.0-6ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.0-10ubuntu2.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-4339-1"],"notices":[{"id":"USN-4339-1","title":"OpenEXR vulnerabilities","summary":"Several security issues were fixed in OpenEXR.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-04-27T12:16:59.787907","description":"Brandon Perry discovered that OpenEXR incorrectly handled certain malformed\nEXR image files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service, or possibly\nexecute arbitrary code. This issue only applied to Ubuntu 20.04 LTS.\n(CVE-2017-9111, CVE-2017-9113, CVE-2017-9115)\n\nTan Jie discovered that OpenEXR incorrectly handled certain malformed EXR\nimage files. If a user were tricked into opening a crafted EXR image file,\na remote attacker could cause a denial of service, or possibly execute\narbitrary code. This issue only applied to Ubuntu 20.04 LTS.\n(CVE-2018-18444)\n\nSamuel Groß discovered that OpenEXR incorrectly handled certain malformed\nEXR image files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service, or possibly\nexecute arbitrary code. (CVE-2020-11758, CVE-2020-11759, CVE-2020-11760,\nCVE-2020-11761, CVE-2020-11762, CVE-2020-11763, CVE-2020-11764)\n\nIt was discovered that OpenEXR incorrectly handled certain malformed EXR\nimage files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service. (CVE-2020-11765)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"openexr","version":"2.2.0-11.1ubuntu1.2","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"libopenexr22","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"openexr","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"openexr-doc","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"}],"eoan":[{"name":"openexr","version":"2.2.1-4.1ubuntu1.1","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"libopenexr23","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"openexr","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"openexr-doc","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"}],"focal":[{"name":"openexr","version":"2.3.0-6ubuntu0.1","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"libopenexr24","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"openexr","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"openexr-doc","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"}],"xenial":[{"name":"openexr","version":"2.2.0-10ubuntu2.2","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"libopenexr22","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"openexr","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"openexr-doc","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-9111","CVE-2017-9113","CVE-2017-9115","CVE-2018-18444","CVE-2020-11758","CVE-2020-11759","CVE-2020-11760","CVE-2020-11761","CVE-2020-11762","CVE-2020-11763","CVE-2020-11764","CVE-2020-11765"]}]},{"id":"CVE-2020-11764","published":"2020-04-14T23:15:00","updated_at":"2025-08-25T23:18:04.432050+00:00","description":"\nAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds\nwrite in copyIntoFrameBuffer in ImfMisc.cpp.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"need to check if commits are the right ones"}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020","https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1","https://ubuntu.com/security/notices/USN-4339-1","https://www.cve.org/CVERecord?id=CVE-2020-11764"],"bugs":["https://bugs.chromium.org/p/project-zero/issues/detail?id=1987"],"patches":{"openexr":["upstream: https://github.com/AcademySoftwareFoundation/openexr/commit/e7c26f6ef5bf7ae8ea21ecf19963186cd1391720","upstream: https://github.com/AcademySoftwareFoundation/openexr/commit/a6408c90339bdf19f89476578d7f936b741be9b2"]},"tags":{},"packages":[{"name":"openexr","source":"https://ubuntu.com/security/cve?package=openexr","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openexr","debian":"https://tracker.debian.org/pkg/openexr","statuses":[{"release_codename":"bionic","status":"released","description":"2.2.0-11.1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.2.1-4.1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.3.0-6ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.0-10ubuntu2.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-4339-1"],"notices":[{"id":"USN-4339-1","title":"OpenEXR vulnerabilities","summary":"Several security issues were fixed in OpenEXR.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-04-27T12:16:59.787907","description":"Brandon Perry discovered that OpenEXR incorrectly handled certain malformed\nEXR image files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service, or possibly\nexecute arbitrary code. This issue only applied to Ubuntu 20.04 LTS.\n(CVE-2017-9111, CVE-2017-9113, CVE-2017-9115)\n\nTan Jie discovered that OpenEXR incorrectly handled certain malformed EXR\nimage files. If a user were tricked into opening a crafted EXR image file,\na remote attacker could cause a denial of service, or possibly execute\narbitrary code. This issue only applied to Ubuntu 20.04 LTS.\n(CVE-2018-18444)\n\nSamuel Groß discovered that OpenEXR incorrectly handled certain malformed\nEXR image files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service, or possibly\nexecute arbitrary code. (CVE-2020-11758, CVE-2020-11759, CVE-2020-11760,\nCVE-2020-11761, CVE-2020-11762, CVE-2020-11763, CVE-2020-11764)\n\nIt was discovered that OpenEXR incorrectly handled certain malformed EXR\nimage files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service. (CVE-2020-11765)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"openexr","version":"2.2.0-11.1ubuntu1.2","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"libopenexr22","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"openexr","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"openexr-doc","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"}],"eoan":[{"name":"openexr","version":"2.2.1-4.1ubuntu1.1","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"libopenexr23","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"openexr","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"openexr-doc","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"}],"focal":[{"name":"openexr","version":"2.3.0-6ubuntu0.1","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"libopenexr24","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"openexr","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"openexr-doc","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"}],"xenial":[{"name":"openexr","version":"2.2.0-10ubuntu2.2","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"libopenexr22","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"openexr","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"openexr-doc","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-9111","CVE-2017-9113","CVE-2017-9115","CVE-2018-18444","CVE-2020-11758","CVE-2020-11759","CVE-2020-11760","CVE-2020-11761","CVE-2020-11762","CVE-2020-11763","CVE-2020-11764","CVE-2020-11765"]}]},{"id":"CVE-2020-11763","published":"2020-04-14T23:15:00","updated_at":"2025-08-25T23:18:04.432050+00:00","description":"\nAn issue was discovered in OpenEXR before 2.4.1. There is an std::vector\nout-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020","https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1","https://ubuntu.com/security/notices/USN-4339-1","https://www.cve.org/CVERecord?id=CVE-2020-11763"],"bugs":["https://bugs.chromium.org/p/project-zero/issues/detail?id=1987"],"patches":{"openexr":[]},"tags":{},"packages":[{"name":"openexr","source":"https://ubuntu.com/security/cve?package=openexr","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openexr","debian":"https://tracker.debian.org/pkg/openexr","statuses":[{"release_codename":"bionic","status":"released","description":"2.2.0-11.1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.2.1-4.1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.3.0-6ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.0-10ubuntu2.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-4339-1"],"notices":[{"id":"USN-4339-1","title":"OpenEXR vulnerabilities","summary":"Several security issues were fixed in OpenEXR.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-04-27T12:16:59.787907","description":"Brandon Perry discovered that OpenEXR incorrectly handled certain malformed\nEXR image files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service, or possibly\nexecute arbitrary code. This issue only applied to Ubuntu 20.04 LTS.\n(CVE-2017-9111, CVE-2017-9113, CVE-2017-9115)\n\nTan Jie discovered that OpenEXR incorrectly handled certain malformed EXR\nimage files. If a user were tricked into opening a crafted EXR image file,\na remote attacker could cause a denial of service, or possibly execute\narbitrary code. This issue only applied to Ubuntu 20.04 LTS.\n(CVE-2018-18444)\n\nSamuel Groß discovered that OpenEXR incorrectly handled certain malformed\nEXR image files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service, or possibly\nexecute arbitrary code. (CVE-2020-11758, CVE-2020-11759, CVE-2020-11760,\nCVE-2020-11761, CVE-2020-11762, CVE-2020-11763, CVE-2020-11764)\n\nIt was discovered that OpenEXR incorrectly handled certain malformed EXR\nimage files. If a user were tricked into opening a crafted EXR image\nfile, a remote attacker could cause a denial of service. (CVE-2020-11765)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"openexr","version":"2.2.0-11.1ubuntu1.2","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"libopenexr22","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"openexr","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"},{"name":"openexr-doc","version":"2.2.0-11.1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.2","pocket":"security"}],"eoan":[{"name":"openexr","version":"2.2.1-4.1ubuntu1.1","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"libopenexr23","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"openexr","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"},{"name":"openexr-doc","version":"2.2.1-4.1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.1"}],"focal":[{"name":"openexr","version":"2.3.0-6ubuntu0.1","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"libopenexr24","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"openexr","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"},{"name":"openexr-doc","version":"2.3.0-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.1","pocket":"security"}],"xenial":[{"name":"openexr","version":"2.2.0-10ubuntu2.2","description":"tools for the OpenEXR image format","is_source":true},{"name":"libopenexr-dev","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"libopenexr22","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"openexr","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"},{"name":"openexr-doc","version":"2.2.0-10ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openexr","version_link":"https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-9111","CVE-2017-9113","CVE-2017-9115","CVE-2018-18444","CVE-2020-11758","CVE-2020-11759","CVE-2020-11760","CVE-2020-11761","CVE-2020-11762","CVE-2020-11763","CVE-2020-11764","CVE-2020-11765"]}]}],"offset":45860,"limit":20,"total_results":79316}