CVE-2021-2427: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) affecting versions 8.0.25 and prior. This vulnerability was disclosed in July 2021 and allows high privileged attackers with network access via multiple protocols to compromise MySQL Server (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.9 (Medium) with the vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability exists in the Optimizer component of MySQL Server and requires high privileges for exploitation (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (NVD, NetApp Advisory).

The vulnerability is considered easily exploitable but requires high privileges and network access via multiple protocols. The attacker needs to have high-level privileges to successfully exploit this vulnerability (Oracle Advisory).

Oracle has released patches to address this vulnerability in MySQL version 8.0.26. Users are strongly recommended to update to this version or later. For systems that cannot be immediately updated, network access restrictions and privilege limitations should be implemented to reduce the risk (Oracle Advisory, NetApp Advisory).