Cloudanix VulnDB

CVE-2023-22094

High · 7.9

CVSS

7.9

EPSS

0.4%

Published

Oct 17, 2023

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A problem in the MySQL setup tool lets someone with ordinary access on the computer change or delete important files and crash the tool after tricking another person into taking an action, which can also affect other programs on the machine.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Moderate
Impact
Data Tampering
Component
Application
Class
Authorization Bypass
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Low-privileged local attacker with logon access can exploit improper handling in the Installer component to achieve unauthorized creation, deletion or modification of critical data and cause complete denial of service (hang or crash), with scope change impacting additional products.

Why it matters to the business

Disruption to database deployment and management workflows, risk of data corruption during installation or upgrades, and extended downtime affecting MySQL environments and any dependent applications.

How an attack unfolds

Attacker obtains local logon access, prepares an action that requires interaction from another user, and leverages the installer flaw to tamper with accessible data while triggering repeated crashes that extend beyond the installer itself.

How to fix it

Upgrade MySQL Installer to version 1.6.8 or later. The fix is also present in MySQL Server bundled releases 8.0.35 and 5.7.44.

How to confirm the fix worked

Inspect the installed MySQL Installer version string and confirm it is 1.6.8 or higher; re-execute any pending installations or upgrades in a test environment to verify stability.

Typical attack path

  1. Gain low-privileged local logon to a system hosting MySQL Installer
  2. Craft or stage malicious input requiring human interaction from a second user
  3. Induce the second user to perform the required interaction with the installer
  4. Achieve unauthorized data modification and induce denial of service

How to detect it

Review installer and system event logs for repeated crashes or hangs, unexpected data modification timestamps during installation sessions, and any scope-related error entries indicating impact beyond the installer process.

What your security team should do

  • Immediately upgrade all instances of MySQL Installer to 1.6.8 or later
  • Restrict local logon access to systems running the installer to the minimum necessary accounts
  • Enable application and system logging around installer execution for post-upgrade monitoring

The record

Vulnerability in the MySQL Installer product of Oracle MySQL (component: Installer: General). Supported versions that are affected are Prior to 1.6.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Installer executes to compromise MySQL Installer. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Installer, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Installer accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Installer. Note: This patch is used in MySQL Server bundled version 8.0.35 and 5.7.44. CVSS 3.1 Base Score 7.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H).

Affected packages

Ecosystem Package Introduced Fixed
Ubuntu:14.04:LTS mysql-5.5 0 No fix
Ubuntu:Pro:14.04:LTS mysql-5.5 0 No fix

Related vulnerabilities