Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mysql/mysql-server

              trunk @ 23e360a
            

445

Fixes

CVEs

CRITICAL

Peak severity

20.0%

Coverage

Highlights

Buffer Overflow: 69 prior fixes. Scrutinize any change in this area.

sql/auth/sql_authorization.cc: most-fixed (21 issues). Treat as high-risk during review.

331 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Buffer Overflow / Memory Corruption: Recurring pre-authentication and client-protocol buffer overflows due to missing length checks on length-encoded fields, leading to memory corruption and potential RCE.

Privilege Escalation / Auth Bypass: Numerous fixes address privilege check inconsistencies, especially around GRANT_ACL, role-based access, partial revokes, and ACL cache races, allowing unauthorized privilege escalation or authentication bypass.

Use-After-Free / Race Condition: Use-after-free and race conditions in ACL cache, temptable engine, and HTTP server plugin lifecycle management can lead to memory corruption and crashes.