Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-2471
HistoryOct 20, 2021 - 12:00 a.m.

CVE-2021-2471

2021-10-2000:00:00
ubuntu.com
ubuntu.com
16

CVSS2

7.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:N/A:C

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H

EPSS

0.001

Percentile

27.3%

Vulnerability in the MySQL Connectors product of Oracle MySQL (component:
Connector/J). Supported versions that are affected are 8.0.26 and prior.
Difficult to exploit vulnerability allows high privileged attacker with
network access via multiple protocols to compromise MySQL Connectors.
Successful attacks of this vulnerability can result in unauthorized access
to critical data or complete access to all MySQL Connectors accessible data
and unauthorized ability to cause a hang or frequently repeatable crash
(complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9
(Confidentiality and Availability impacts). CVSS Vector:
(CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).

Notes

Author Note
leosilva since 5.5 is no longer upstream supported and so far we cannot patch it, marking it as ignored.
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchmariadb-10.0< anyUNKNOWN
ubuntu18.04noarchmariadb-10.1< anyUNKNOWN
ubuntu20.04noarchmariadb-10.3< anyUNKNOWN
ubuntu20.04noarchmysql-8.0< 8.0.27-0ubuntu0.20.04.1UNKNOWN
ubuntu21.04noarchmysql-8.0< 8.0.27-0ubuntu0.21.04.1UNKNOWN
ubuntu21.10noarchmysql-8.0< 8.0.27-0ubuntu0.21.10.1UNKNOWN
ubuntu22.04noarchmysql-8.0< 8.0.27-0ubuntu0.21.10.1UNKNOWN
ubuntu22.10noarchmysql-8.0< 8.0.27-0ubuntu0.21.10.1UNKNOWN
ubuntu23.04noarchmysql-8.0< 8.0.27-0ubuntu0.21.10.1UNKNOWN
ubuntu23.10noarchmysql-8.0< 8.0.27-0ubuntu0.21.10.1UNKNOWN
Rows per page:
1-10 of 131

CVSS2

7.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:N/A:C

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H

EPSS

0.001

Percentile

27.3%