Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).

🗓️ 25 Jan 2022 08:00:00Reported by MicrosoftType

MySQL Cluster vulnerability enables data read and partial DoS by a privileged attacker on the physical network; user interaction is required.

Reporter	Title	Published	Views	Family All 214
ATTACKERKB	CVE-2022-21313	19 Jan 202212:15	–	attackerkb
CBLMariner	CVE-2022-21313 affecting package mysql 8.0.27-2	8 Feb 202203:14	–	cbl_mariner
CBLMariner	CVE-2022-21313 affecting package mysql for versions less than 8.0.28-1	9 Apr 202206:53	–	cbl_mariner
Chainguard	CVE-2022-21313 vulnerabilities	19 Jan 202212:15	–	cgr
Circl	CVE-2022-21313	19 Jan 202214:38	–	circl
CNNVD	Oracle MySQL 缓冲区错误漏洞	18 Jan 202200:00	–	cnnvd
CNVD	Oracle MySQL Cluster Information Disclosure Vulnerability	25 Jan 202200:00	–	cnvd
CVE	CVE-2022-21313	19 Jan 202211:24	–	cve
Cvelist	CVE-2022-21313	19 Jan 202211:24	–	cvelist
EUVD	EUVD-2022-26538	3 Oct 202520:07	–	euvd