CVE-2021-2011 — Vulnetix

CVE-2021-2011 PUBLISHED CVSS 6.900000095367432 MEDIUM

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

EPSS 2.10% · 84.4th percentile

Risk Scores

CVSS 4.0

6.900000095367432

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

EPSS Score

2.10%

84.4th percentile

Affected Products

Vendor	Product	Versions
Bitnami	mariadb	10.0.0, 10.1.0, 10.2.0
Bitnami	mariadb-min	5.5.0, 10.0.0, 10.1.0
Bitnami	mysql-client	10.1.0, 10.0.0, 10.2.0
Bitnami	mariadb	5.5.0, 10.2.0, 10.1.0
Bitnami	mysql-client	10.2.0, 10.2.0, 5.5.0
Bitnami	mariadb-min	10.0.0, 10.1.0, 10.2.0

Timeline

Jan 19, 2021 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 28, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 1, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Nov 6, 2022 EPSS Score
Jan 8, 2023 EPSS Score

References

Open in Interactive Console →