CVE-2021-35613: 
MySQL Cluster vulnerability analysis and mitigation

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). The vulnerability affects versions 8.0.26 and prior. This is a difficult to exploit vulnerability that allows unauthenticated attackers with network access via multiple protocols to compromise MySQL Cluster. The vulnerability was disclosed in Oracle's October 2021 Critical Patch Update (Oracle CPU).

The vulnerability has been assigned a CVSS v3.1 Base Score of 3.7 (LOW) with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L. The scoring indicates that the vulnerability requires network access, has high attack complexity, requires no privileges, needs no user interaction, has unchanged scope, and only impacts availability at a low level (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster (Oracle CPU).

Oracle released patches for this vulnerability as part of the October 2021 Critical Patch Update. Users should update to the patched versions of MySQL Cluster. The vulnerability affects versions 8.0.26 and prior, so updating beyond this version will mitigate the issue (Oracle CPU, NetApp Advisory).