CVE-2021-35624 — Vulnetix

CVE-2021-35624 PUBLISHED

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).

EPSS 0.30% · 53.7th percentile

Risk Scores

EPSS Score

0.30%

53.7th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:16.04:LTS	percona-xtradb-cluster-5.6	0, 5.6.37-26.21-0ubuntu0.16.04.2, 5.6.37-26.21-0ubuntu0.16.04.1
Ubuntu:22.04:LTS	mysql-8.0	8.0.26-0ubuntu1, 0
Ubuntu:20.04:LTS	mysql-8.0	8.0.19-0ubuntu5, 8.0.21-0ubuntu0.20.04.3, 8.0.17-0ubuntu3
Ubuntu:Pro:16.04:LTS	mysql-5.7	5.7.33-0ubuntu0.16.04.1, 5.7.17-0ubuntu0.16.04.2, 0
Ubuntu:14.04:LTS	mysql-5.5	5.5.41-0ubuntu0.14.04.1, 5.5.32-0ubuntu7, 5.5.34-0ubuntu1
Ubuntu:16.04:LTS	percona-server-5.6	5.6.22-rel71.0-0ubuntu4.1, 5.6.22-rel71.0-0ubuntu2, 0
Ubuntu:18.04:LTS	mysql-5.7	5.7.23-0ubuntu0.18.04.1, 5.7.31-0ubuntu0.18.04.1, 0

Timeline

Oct 20, 2021 CVE Published
Oct 21, 2021 EPSS Score
Dec 16, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Apr 8, 2022 EPSS Score
Jun 3, 2022 EPSS Score
Jul 30, 2022 EPSS Score
Sep 24, 2022 EPSS Score
Nov 19, 2022 EPSS Score
Jan 14, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2021-35624 third-party-advisory
https://www.oracle.com/security-alerts/cpuoct2021.html third-party-advisory
https://ubuntu.com/security/notices/USN-5123-1 vendor-advisory
https://ubuntu.com/security/notices/USN-5123-2 vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2021-35624 third-party-advisory

Open in Interactive Console →