CVE-2022-21249: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privilege...

Summary

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
oracle	mysql	>= 8.0.0, <= 8.0.27 `cpe:2.3:a:oracle:mysql::::::::`
netapp	active_iq_unified_manager	All versions `cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vsphere::`
netapp	oncommand_insight	All versions `cpe:2.3:a:netapp:oncommand_insight:-:::::::*`
netapp	oncommand_workflow_automation	All versions `cpe:2.3:a:netapp:oncommand_workflow_automation:-:::::::*`
netapp	snapcenter	All versions `cpe:2.3:a:netapp:snapcenter:-:::::::*`
fedoraproject	fedora	34 35 `cpe:2.3:o:fedoraproject:fedora:34:::::::*`

Original advisory text

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privilege...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

References

https://security.netapp.com/advisory/ntap-20220121-0008/ Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2022.html URL
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21249... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-21249 Vendor Advisory