CVE-2021-2194: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) affecting versions 5.7.33 and prior and 8.0.23 and prior. This vulnerability was discovered and disclosed in December 2020, as indicated by the CVE record creation date (CVE MITRE).

The vulnerability is classified with a CVSS 3.1 Base Score of 4.9, indicating medium severity. The CVSS Vector (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) shows that it is network accessible, requires low attack complexity, but needs high privileges to exploit. No user interaction is required, and the scope is unchanged. The vulnerability affects the InnoDB component of MySQL Server (Oracle Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete Denial of Service (DoS) of MySQL Server. The vulnerability only impacts availability, with no direct effect on confidentiality or integrity (NVD).

Oracle has released patches to address this vulnerability in MySQL versions. Users should upgrade to versions newer than 5.7.33 or 8.0.23. The vulnerability has been fixed in multiple distributions including Fedora 32, 33, and 34 through community-mysql-8.0.24 updates (Fedora Update).