Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-36949
HistoryApr 21, 2022 - 12:00 a.m.

Oracle MySQL InnoDB Component Denial of Service Vulnerability

2022-04-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Server is one of the database server components, and MySQL Connectors is one of the drivers for connecting to applications that use MySQL. Oracle MySQL (component. A denial-of-service vulnerability exists in the MySQL Server product of Oracle MySQL (component: InnoDB), which stems from an input validation error in the InnoDB component of MySQL Server. A remote attacker could exploit this vulnerability to perform a service disruption.

CPENameOperatorVersion
Oracle MySQL Server >=8.0.0,le8.0.28

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P