
Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth) affects versions 5.7.31 and prior and 8.0.21 and prior. This easily exploitable vulnerability allows high privileged attackers with network access via multiple protocols to compromise MySQL Server (CVE Mitre, Oracle CPU).
The vulnerability has a CVSS 3.1 Base Score of 4.9 (Availability impacts) with the vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). This indicates a network-accessible vulnerability with low attack complexity, requiring high privileges, no user interaction, and affecting availability (NVD, NetApp Security).
Successful attacks exploiting this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. The vulnerability specifically impacts the availability of the system without compromising confidentiality or integrity (CVE Mitre).
The vulnerability is classified as easily exploitable, requiring a high-privileged attacker with network access. The attack can be conducted via multiple protocols to compromise MySQL Server (Oracle CPU).
Oracle has released patches for affected versions through their Critical Patch Update program. Users should upgrade to versions newer than MySQL 5.7.31 and 8.0.21. For specific environments like Gentoo, users should upgrade to MySQL version 8.0.24 or later (Gentoo Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."