7.1
CVE-2021-2389
- EPSS 8.15%
- Veröffentlicht 21.07.2021 15:15:41
- Zuletzt bearbeitet 21.11.2024 06:03:01
- Erkennungen
LoginVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Mysql Server Version >= 5.7.0 <= 5.7.34
Oracle ≫ Mysql Server Version >= 8.0.0 <= 8.0.25
Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere
Netapp ≫ Active Iq Unified Manager Version - SwPlatform windows
Netapp ≫ Oncommand Insight Version -
Netapp ≫ Oncommand Workflow Automation Version -
Netapp ≫ Snapcenter Version -
Fedoraproject ≫ Fedora Version 34
Fedoraproject ≫ Fedora Version 35
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 8.15% | 0.943 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.1 | 8.6 | 6.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:C
|
| Oracle | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
|
https://www.oracle.com/security-alerts/cpujul2021.html
https://security.netapp.com/advisory/ntap-20210723-0001/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2UTW5KMPPDKIMGB4ULE2HS22HYLVKYIH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VGR5ZTB5QEDRRC6G5U6TFNCIVBBKGS5J/
https://www.zerodayinitiative.com/advisories/ZDI-21-880/