Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM50D6AB8BFC4B38B3B5A2A79B2815AA71FB82CF937CA979BCACDDD58A775A78E4
HistoryNov 05, 2021 - 2:49 p.m.

Security Bulletin: IBM Security Guardium is affected by an Oracle MySQL vulnerability

2021-11-0514:49:08
www.ibm.com
38

6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:P/I:P/A:C

0.113 Low

EPSS

Percentile

94.6%

JSON

Summary

IBM Security Guardium has fixed this vulnerability

Vulnerability Details

CVEID:CVE-2021-2441
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL related to the Cluster: JS module component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205865 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2352
**DESCRIPTION:**An unspecified vulnerability in MySQL Server related to the DDL component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205779 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2390
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the InnoDB component could allow an unauthenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205817 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2412
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205839 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2372
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the InnoDB component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205799 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2424
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: Stored Procedure component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205848 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2417
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: GIS component could allow an authenticated attacker to cause low confidentiality impact, low integrity impact, and high availability impact.
CVSS Base score: 6
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205841 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H)

CVEID:CVE-2021-2444
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205868 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2342
**DESCRIPTION:**An unspecified vulnerability in MySQL Server related to the Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205769 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2389
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the InnoDBcomponent could allow an unauthenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205816 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2440
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL related to the Server: DML component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205864 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2387
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205814 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2427
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205851 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2418
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205842 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2354
**DESCRIPTION:**An unspecified vulnerability in MySQL Server related to the Federated component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205781 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2429
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the InnoDB component could allow an unauthenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205853 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2340
**DESCRIPTION:**An unspecified vulnerability in MySQL Server related to the Memcached component could allow an authenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 2.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205767 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)

CVEID:CVE-2021-2426
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205850 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2356
**DESCRIPTION:**An unspecified vulnerability in MySQL Server related to the Replication component could allow an authenticated attacker to cause no confidentiality impact, low integrity impact, and high availability impact.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205783 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H)

CVEID:CVE-2021-2357
**DESCRIPTION:**An unspecified vulnerability in MySQL Server related to the Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205784 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2437
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL related to the Server: Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205861 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2339
**DESCRIPTION:**An unspecified vulnerability in MySQL Server related to the DDL component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205766 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2425
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: Stored Procedure component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205849 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-2422
**DESCRIPTION:**An unspecified vulnerability in Oracle MySQL Server related to the Server: PS component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/205846 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Security Guardium 10.5

IBM Security Guardium| 10.6

IBM Security Guardium| 11.1

IBM Security Guardium| 11.2

IBM Security Guardium| 11.3

Remediation/Fixes

Product Versions Fix
IBM Security Guardium 10.5
http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=10.0&platform=Linux&function=fixId&fixids=SqlGuard_10.0p545_Bundle_Oct-19-2021&includeSupersedes=0&source=fc
IBM Security Guardium 10.6

http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=10.0&platform=Linux&function=fixId&fixids=SqlGuard_10.0p680_Bundle_Oct-14-2021&includeSupersedes=0&source=fc

IBM Security Guardium| 11.1
|

http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=Linux&function=fixId&fixids=SqlGuard_11.0p150_Bundle_Oct-26-2021&includeSupersedes=0&source=fc

IBM Security Guardium|

11.2

|

http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=Linux&function=fixId&fixids=SqlGuard_11.0p260_Bundle_Oct-22-2021&includeSupersedes=0&source=fc

IBM Security Guardium|

11.3

|

http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.0&platform=Linux&function=fixId&fixids=SqlGuard_11.0p340_Bundle_Oct-27-2021&includeSupersedes=0&source=fc

Workarounds and Mitigations

None

Related

ubuntu 2
osv 18
openvas 20
nessus 21
freebsd 1
photon 6
fedora 4
amazon 1
suse 3
mageia 1
redhatcve 16
cnvd 17
prion 14
debiancve 16
veracode 16
cve 14
ubuntucve 13
cbl_mariner 12
mariadbunix 1
alpinelinux 1
zdi 2
ubuntu
ubuntu
MySQL vulnerabilities
2021-07-26 00:00:00
MariaDB vulnerabilities
2021-08-13 00:00:00
osv
osv
mysql-5.7, mysql-8.0 vulnerabilities
2021-07-26 14:12:27
mariadb-10.3, mariadb-10.5 vulnerabilities
2021-08-13 13:03:44
CVE-2021-2387
2021-07-21 15:15:40
openvas
openvas
Ubuntu: Security Advisory (USN-5022-1)
2021-07-27 00:00:00
Oracle MySQL Server 8.0 <= 8.0.25 Security Update (cpujul2021) - Windows
2021-07-22 00:00:00
Oracle MySQL Server 8.0 <= 8.0.25 Security Update (cpujul2021) - Linux
2021-07-22 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-5022-1)
2021-07-26 00:00:00
Photon OS 4.0: Mysql PHSA-2021-4.0-0077
2021-08-11 00:00:00
FreeBSD : MySQL -- Multiple vulnerabilities (38a4a043-e937-11eb-9b84-d4c9ef517024)
2021-07-21 00:00:00
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2021-07-20 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2021-0281
2021-08-09 00:00:00
Critical Photon OS Security Update - PHSA-2021-0077
2021-08-09 00:00:00
Critical Photon OS Security Update - PHSA-2021-4.0-0077
2021-08-10 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: community-mysql-8.0.26-1.fc33
2021-08-25 20:05:25
[SECURITY] Fedora 34 Update: community-mysql-8.0.26-1.fc34
2021-08-25 19:58:48
[SECURITY] Fedora 34 Update: mariadb-10.5.13-1.fc34
2021-12-11 01:40:22
amazon
amazon
Medium: mysql57
2021-10-29 16:27:00
suse
suse
Security update for mariadb (moderate)
2021-09-03 00:00:00
Security update for mariadb (moderate)
2021-08-25 00:00:00
Security update for mariadb (moderate)
2021-08-25 00:00:00
mageia
mageia
Updated mariadb packages fix security vulnerabilities
2021-08-14 17:00:09
redhatcve
redhatcve
CVE-2021-2387
2021-08-10 21:50:35
CVE-2021-2352
2021-08-10 21:50:15
CVE-2021-2340
2021-08-10 21:20:25
cnvd
cnvd
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-54378)
2021-07-21 00:00:00
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-54025)
2021-07-21 00:00:00
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-54392)
2021-07-21 00:00:00
prion
prion
Code injection
2021-07-21 15:15:00
Code injection
2021-07-21 15:15:00
Code injection
2021-07-21 15:15:00
debiancve
debiancve
CVE-2021-2340
2021-07-21 15:15:00
CVE-2021-2387
2021-07-21 15:15:00
CVE-2021-2352
2021-07-21 15:15:00
veracode
veracode
Denial Of Service (DoS)
2021-10-18 14:27:59
Denial Of Service (DoS)
2021-10-18 14:27:56
Denial Of Service (DoS)
2021-10-18 14:28:05
cve
cve
CVE-2021-2387
2021-07-21 15:15:00
CVE-2021-2357
2021-07-21 15:15:00
CVE-2021-2340
2021-07-21 15:15:00
ubuntucve
ubuntucve
CVE-2021-2387
2021-07-21 00:00:00
CVE-2021-2418
2021-07-21 00:00:00
CVE-2021-2352
2021-07-21 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-2352 affecting package mysql 8.0.24-1
2021-08-25 19:57:27
CVE-2021-2357 affecting package mysql 8.0.24-1
2021-08-25 19:57:27
CVE-2021-2354 affecting package mysql 8.0.24-1
2021-08-25 19:57:27
mariadbunix
mariadbunix
CVE-2021-2389
2021-07-21 15:15:41
alpinelinux
alpinelinux
CVE-2021-2389
2021-07-21 15:15:00
zdi
zdi
MySQL memcached Plugin Integer Underflow Remote Code Execution Vulnerability
2021-07-22 00:00:00
MySQL InnoDB Heap-based Buffer Overflow Remote Code Execution Vulnerability
2021-07-22 00:00:00

6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:P/I:P/A:C

0.113 Low

EPSS

Percentile

94.6%

JSON
Related for 50D6AB8BFC4B38B3B5A2A79B2815AA71FB82CF937CA979BCACDDD58A775A78E4
ubuntu2osv18openvas20nessus21freebsd1photon6fedora4amazon1suse3mageia1redhatcve16cnvd17prion14debiancve16veracode16cve14ubuntucve13cbl_mariner12mariadbunix1alpinelinux1zdi2