Lucene search

China National Vulnerability DatabaseCNVD-2022-54638

HistoryJul 21, 2022 - 12:00 a.m.

Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-54638)

2022-07-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

JSON

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Server is one of the database server components, and an input validation error vulnerability exists in Oracle MySQL Cluster 8.0.29 and earlier versions. The vulnerability is caused by an input validation error in the General component, which can be exploited by an authenticated attacker to cause MySQL Server to hang or crash.

CPENameOperatorVersion
oracle mysql clusterlt8.0.29

CPE	Name	Operator	Version
	oracle mysql cluster	lt	8.0.29

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

JSON

Related for CNVD-2022-54638