CVE-2022-21427
Summary
| CVE | CVE-2022-21427 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-19 21:15:00 UTC |
| Updated | 2022-10-27 13:57:00 UTC |
| Description | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Debian | Debian Linux | 10.0 | All | All | All |
| Application | Mariadb | Mariadb | All | All | All | All |
| Application | Netapp | Active Iq Unified Manager | - | All | All | All |
| Application | Netapp | Active Iq Unified Manager | - | All | All | All |
| Application | Netapp | Oncommand Insight | - | All | All | All |
| Application | Netapp | Oncommand Workflow Automation | - | All | All | All |
| Application | Netapp | Snapcenter | - | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Oracle Critical Patch Update Advisory - April 2022 | MISC | www.oracle.com | |
| [SECURITY] [DLA 3114-1] mariadb-10.3 security update | MLIST | lists.debian.org | |
| April 2022 MySQL Server Vulnerabilities in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160096 Oracle Enterprise Linux Security Update for mariadb:10.3 (ELSA-2022-6443)
- 160112 Oracle Enterprise Linux Security Update for mysql (ELSA-2022-6590)
- 160186 Oracle Enterprise Linux Security Update for mysql:8.0 (ELSA-2022-7119)
- 181097 Debian Security Update for mariadb-10.3 (DLA 3114-1)
- 181686 Debian Security Update for mariadb-10.5 (CVE-2022-21427)
- 198764 Ubuntu Security Notification for MySQL Vulnerabilities (USN-5400-1)
- 199043 Ubuntu Security Notification for MariaDB Vulnerabilities (USN-5739-1)
- 20256 Oracle MySQL April 2022 Critical Patch Update (CPUAPR2022)
- 240645 Red Hat Update for rh-mariadb103-galera and rh-mariadb103-mariadb (RHSA-2022:6306)
- 240665 Red Hat Update for mariadb:10.3 (RHSA-2022:6443)
- 240666 Red Hat Update for rh-mysql80-mysql security (RHSA-2022:6518)
- 240679 Red Hat Update for mysql security (RHSA-2022:6590)
- 240780 Red Hat Update for mysql:8.0 security (RHSA-2022:7119)
- 296082 Oracle Solaris 11.4 Support Repository Update (SRU) 48.126.1 Missing (CPUJUL2022)
- 500390 Alpine Linux Security Update for mariadb
- 752243 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:2107-1)
- 752258 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:2160-1)
- 752278 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:2189-1)
- 753083 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:2003-1)
- 753364 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:2561-1)
- 900854 Common Base Linux Mariner (CBL-Mariner) Security Update for mysql (9501)
- 901318 Common Base Linux Mariner (CBL-Mariner) Security Update for mysql (9501-1)
- 901361 Common Base Linux Mariner (CBL-Mariner) Security Update for mariadb (9677)
- 901936 Common Base Linux Mariner (CBL-Mariner) Security Update for mysql (9494)
- 902227 Common Base Linux Mariner (CBL-Mariner) Security Update for mariadb (9677-1)
- 902369 Common Base Linux Mariner (CBL-Mariner) Security Update for mysql (9494-1)
- 940668 AlmaLinux Security Update for mariadb:10.3 (ALSA-2022:6443)
- 940693 AlmaLinux Security Update for mysql (ALSA-2022:6590)
- 940710 AlmaLinux Security Update for mysql:8.0 (ALSA-2022:7119)
- 960450 Rocky Linux Security Update for mariadb:10.3 (RLSA-2022:6443)
- 960476 Rocky Linux Security Update for mysql (RLSA-2022:6590)