CVE-2021-2087: 
MySQL vulnerability analysis and mitigation

CVE-2021-2087 is a vulnerability in the MySQL Server product of Oracle MySQL, specifically affecting the Server: DML component. The vulnerability was discovered and disclosed on January 20, 2021, affecting MySQL versions 8.0.22 and prior. This vulnerability impacts the MySQL Server's Data Manipulation Language (DML) functionality (Ubuntu Security, NVD).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.4 (Medium severity). The attack vector is Local (L), with Low attack complexity, requiring High privileges, and no user interaction. The scope is Unchanged, with no impact on Confidentiality and Integrity, but High impact on Availability. The CVSS Vector is: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (Ubuntu Security).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete Denial of Service (DoS) of MySQL Server (Ubuntu Security).

The vulnerability is classified as easily exploitable but requires a high privileged attacker with logon access to the infrastructure where MySQL Server executes (Ubuntu Security).

The vulnerability has been fixed in MySQL version 8.0.23. Multiple distributions have released patches to address this vulnerability. Ubuntu has fixed this in version 8.0.23-1 for various releases including 20.04 LTS, 20.10, and newer versions (Ubuntu Security).