VDB
CVE-2021-35593
CVE-2021-35593
PUBLISHED
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).
EPSS 39.34% · 97.4th percentile
Risk Scores
EPSS Score
39.34%
97.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:14.04:LTS | mysql-5.5 | *, 5.5.47-0ubuntu0.14.04.1, 5.5.49-0ubuntu0.14.04.1 |
| Ubuntu:16.04:LTS | percona-xtradb-cluster-5.6 | 5.6.37-26.21-0ubuntu0.16.04.2, *, * |
| Ubuntu:16.04:LTS | percona-server-5.6 | 0, 5.6.22-rel71.0-0ubuntu4, 5.6.22-rel71.0-0ubuntu4.1 |
Exploit Intelligence
Timeline
- Oct 20, 2021 CVE Published
- Oct 21, 2021 EPSS Score
- Dec 16, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 10, 2022 EPSS Score
- Apr 8, 2022 EPSS Score
- Jun 3, 2022 EPSS Score
- Sep 24, 2022 EPSS Score
- Nov 20, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 12, 2023 EPSS Score
- May 13, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2021-35593 third-party-advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2021-35593 third-party-advisory