CVE-2021-2009: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) affecting versions 8.0.19 and prior. This vulnerability allows high privileged attackers with network access via multiple protocols to compromise MySQL Server (Oracle CPU, Debian Tracker).

The vulnerability has a CVSS 3.1 Base Score of 4.9 (Medium) with vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability is easily exploitable and requires high privileges with network access via multiple protocols (NVD, NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (Debian Tracker, Oracle CPU).

The vulnerability is considered easily exploitable but requires high privileges with network access. The attacker needs to have valid authentication credentials to exploit this vulnerability (NVD).

Oracle has released patches to address this vulnerability in MySQL version 8.0.23. Users are strongly recommended to upgrade to this version or later. The fix is also included in various distribution packages like Fedora's mysql-connector-odbc-8.0.23 and community-mysql-8.0.23 packages (Fedora Update, Gentoo Advisory).