CVE-2021-35631: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. The vulnerability was disclosed in October 2021 with CVE identifier CVE-2021-35631 (Oracle Advisory).

The vulnerability has a CVSS 3.1 Base Score of 4.9 (Availability impacts) with vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). The vulnerability affects the GIS component of MySQL Server and requires high privileges to exploit (NVD).

Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (Oracle Advisory).

The vulnerability is easily exploitable by an attacker with high privileges and network access via multiple protocols. The attack requires no user interaction (NVD).

Oracle released patches for affected versions as part of the October 2021 Critical Patch Update. MySQL has been updated to version 8.0.27 in various distributions including Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. For Ubuntu 18.04 LTS, MySQL was updated to version 5.7.36 (Ubuntu Notice).