CVE-2022-21316

🗓️ 19 Jan 2022 11:24:15Reported by oracleType

Vulnerability in Oracle MySQL Cluster product allows takeover of MySQL Cluster. Difficult to exploit

Reporter	Title	Published	Views	Family All 219
ATTACKERKB	CVE-2022-21316	19 Jan 202212:15	–	attackerkb
BDU FSTEC	Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.	30 Mar 202200:00	–	bdu_fstec
CBLMariner	CVE-2022-21316 affecting package mysql 8.0.27-2	8 Feb 202203:14	–	cbl_mariner
CBLMariner	CVE-2022-21316 affecting package mysql for versions less than 8.0.28-1	9 Apr 202206:53	–	cbl_mariner
Chainguard	CVE-2022-21316 vulnerabilities	19 Jan 202212:15	–	cgr
CNNVD	Oracle MySQL 输入验证错误漏洞	18 Jan 202200:00	–	cnnvd
CNVD	Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-17688)	25 Feb 202200:00	–	cnvd
Cvelist	CVE-2022-21316	19 Jan 202211:24	–	cvelist
EUVD	EUVD-2022-26541	3 Oct 202520:07	–	euvd
Microsoft CVE	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).	25 Jan 202208:00	–	mscve

NVD

Vulners

Node

oracle mysqlRange7.4.0–7.4.34

oracle mysqlRange7.5.0–7.5.24

oracle mysqlRange7.6.0–7.6.20

oracle mysqlRange8.0.0–8.0.27

Node

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

[
  {
    "product": "MySQL Cluster",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "7.4.34 and prior"
      },
      {
        "status": "affected",
        "version": "7.5.24 and prior"
      },
      {
        "status": "affected",
        "version": "7.6.20 and prior"
      },
      {
        "status": "affected",
        "version": "8.0.27 and prior"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20220121-0008/
oracle	www.oracle.com/security-alerts/cpujan2022.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-101/

21 Nov 2024 06:44Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.6

CVSS 3.16.3

EPSS0.00509

SSVC