CVE-2021-35618

🗓️ 20 Oct 2021 10:50:54Reported by oracleType

Vulnerability in Oracle MySQL Cluster product - 8.0.26 and prio

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	12 May 202214:14	–	ibm
FreeBSD	MySQL -- Multiple vulnerabilities	16 Oct 202100:00	–	freebsd
CBLMariner	CVE-2021-35618 affecting package mysql 8.0.26-2	6 Nov 202106:45	–	cbl_mariner
CNNVD	Oracle MySQL 输入验证错误漏洞	19 Oct 202100:00	–	cnnvd
CNVD	Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-17697)	22 Oct 202100:00	–	cnvd
CVE	CVE-2021-35618	20 Oct 202110:50	–	cve
Debian CVE	CVE-2021-35618	20 Oct 202110:50	–	debiancve
EUVD	EUVD-2021-22254	7 Oct 202500:30	–	euvd
Microsoft CVE	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 1.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L).	26 Oct 202107:00	–	mscve
NCSC	Vulnerabilities fixed in Oracle MySQL	20 Oct 202100:00	–	ncsc

[
  {
    "product": "MySQL Cluster",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.26 and prior"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20211022-0003/
oracle	www.oracle.com/security-alerts/cpuoct2021.html

22 Oct 2021 17:07Current

2.3Low risk

Vulners AI Score2.3

CVSS 3.11.8

EPSS0.00323