CVE-2021-2305: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) affecting versions 8.0.23 and prior. This vulnerability was discovered and disclosed in April 2021. The vulnerability specifically impacts the Data Manipulation Language (DML) component of MySQL Server (Oracle Advisory).

The vulnerability is easily exploitable by a high-privileged attacker with network access via multiple protocols. It has been assigned a CVSS 3.1 Base Score of 4.9 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The scoring indicates that while the attack complexity is low, it requires high privileges to exploit (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. The vulnerability only affects availability with no impact on confidentiality or integrity (Oracle Advisory, NVD).

The vulnerability is considered easily exploitable by attackers with high privileges and network access. Multiple protocols can be used to conduct the attack. No user interaction is required for exploitation (NVD).

Oracle has released patches to address this vulnerability in their April 2021 Critical Patch Update. Users should upgrade to the latest version of MySQL Server. For systems that cannot be immediately updated, limiting network access and restricting high-privilege accounts can help reduce the risk (Oracle Advisory).