VDB
CVE-2021-35598
CVE-2021-35598
PUBLISHED
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).
EPSS 39.34% · 97.4th percentile
Risk Scores
EPSS Score
39.34%
97.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | percona-xtradb-cluster-5.6 | *, *, 0 |
| Ubuntu:16.04:LTS | percona-server-5.6 | 0, *, 5.6.22-rel71.0-0ubuntu2 |
| Ubuntu:14.04:LTS | mysql-5.5 | 5.5.49-0ubuntu0.14.04.1, 5.5.50-0ubuntu0.14.04.1, 5.5.53-0ubuntu0.14.04.1 |
Timeline
- Oct 20, 2021 CVE Published
- Oct 21, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 8, 2022 EPSS Score
- Jul 30, 2022 EPSS Score
- Sep 24, 2022 EPSS Score
- Jan 14, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 7, 2023 EPSS Score
- May 28, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2021-35598 third-party-advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2021-35598 third-party-advisory