MySQL的漏洞你们怎么处理的？

h3cie

Vulnerability Details : CVE-2021-2022

MySQL Server, versions 5.6.50 and prior, 5.7.32 and prior, 8.0.22 and prior……

我现在5.7的已经更新到5.7.37了，但5.6的还是5.6.50的，这个版本不是影响到了么？

羊村你喜哥

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

require

处理个鸡儿，内网环境，物理隔离有本事你过来啊你

h3cie

羊村你喜哥 发表于 2022-6-15 10:17

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions th ...
5.6.50版本，意思是不重要？不用管？

h3cie

require 发表于 2022-6-15 10:17

处理个鸡儿，内网环境，物理隔离有本事你过来啊你


，低调低调

hooray

关闭远程访问

heihai

当然是防火墙限制ip只允许应用访问

羊村你喜哥

h3cie 发表于 2022-6-15 10:21

5.6.50版本，意思是不重要？不用管？
需要吧，具体的看https://www.oracle.com/security-alerts/cpujan2021.html

h3cie

hooray 发表于 2022-6-15 10:24

关闭远程访问
3Q，感谢！

h3cie

heihai 发表于 2022-6-15 10:24

当然是防火墙限制ip只允许应用访问
感谢回复！~