Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to disclose sensitive information and cause partial service interruptions.

🗓️ 30 Mar 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Cluster component vulnerability allows reading beyond buffers to disclose data and cause outages.

Reporter	Title	Published	Views	Family All 215
ATTACKERKB	CVE-2022-21355	19 Jan 202212:15	–	attackerkb
CBLMariner	CVE-2022-21355 affecting package mysql 8.0.27-2	8 Feb 202203:14	–	cbl_mariner
CBLMariner	CVE-2022-21355 affecting package mysql for versions less than 8.0.28-1	9 Apr 202206:53	–	cbl_mariner
Chainguard	CVE-2022-21355 vulnerabilities	19 Jan 202212:15	–	cgr
Circl	CVE-2022-21355	15 Nov 202317:01	–	circl
CNNVD	Oracle MySQL 缓冲区错误漏洞	18 Jan 202200:00	–	cnnvd
CNVD	Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-07916)	26 Jan 202200:00	–	cnvd
CVE	CVE-2022-21355	19 Jan 202211:25	–	cve
Cvelist	CVE-2022-21355	19 Jan 202211:25	–	cvelist
EUVD	EUVD-2022-26580	3 Oct 202520:07	–	euvd

Vulners

Node

oracle mysql_clusterRange≤7.4.34

OR

oracle mysql_clusterRange≤7.5.24

OR

oracle mysql_clusterRange≤7.6.20

OR

oracle mysql_clusterRange≤8.0.27

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022011902
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-124/
oracle	www.oracle.com/security-alerts/cpujan2022.html
security	www.security.netapp.com/advisory/ntap-20220121-0008/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-124/

30 Jun 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 22.9

CVSS 32.9

EPSS0.00261

cluster component memory buffers data disclosure partial outages database cluster