Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-2232
HistoryApr 22, 2021 - 12:00 a.m.

CVE-2021-2232

2021-04-2200:00:00
ubuntu.com
ubuntu.com
9

1.9 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

14.4%

Vulnerability in the MySQL Server product of Oracle MySQL (component:
Server: Group Replication Plugin). Supported versions that are affected are
8.0.23 and prior. Difficult to exploit vulnerability allows high privileged
attacker with logon to the infrastructure where MySQL Server executes to
compromise MySQL Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a partial denial of service
(partial DOS) of MySQL Server. CVSS 3.1 Base Score 1.9 (Availability
impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).

Bugs

Notes

Author Note
leosilva since 5.5 is no longer upstream supported and so far we cannot patch it, marking it as ignored.
mdeslaur 8.x only
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchmariadb-10.0< anyUNKNOWN
ubuntu20.04noarchmysql-8.0< 8.0.25-0ubuntu0.20.04.1UNKNOWN
ubuntu20.10noarchmysql-8.0< 8.0.25-0ubuntu0.20.10.1UNKNOWN
ubuntu21.04noarchmysql-8.0< 8.0.25-0ubuntu0.21.04.1UNKNOWN
ubuntu21.10noarchmysql-8.0< 8.0.25-0ubuntu3UNKNOWN
ubuntu22.04noarchmysql-8.0< 8.0.25-0ubuntu3UNKNOWN
ubuntu22.10noarchmysql-8.0< 8.0.25-0ubuntu3UNKNOWN
ubuntu23.04noarchmysql-8.0< 8.0.25-0ubuntu3UNKNOWN
ubuntu23.10noarchmysql-8.0< 8.0.25-0ubuntu3UNKNOWN
ubuntu24.04noarchmysql-8.0< 8.0.25-0ubuntu3UNKNOWN
Rows per page:
1-10 of 121

1.9 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

14.4%