CVE-2022-21303: 
MySQL vulnerability analysis and mitigation

CVE-2022-21303 is a vulnerability in the MySQL Server product of Oracle MySQL, specifically affecting the Server: Stored Procedure component. The affected versions are MySQL Server 5.7.36 and prior, and 8.0.27 and prior. This vulnerability was disclosed in Oracle's January 2022 Critical Patch Update (Oracle CPU).

The vulnerability is characterized as easily exploitable, allowing high-privileged attackers with network access via multiple protocols to compromise MySQL Server. It has been assigned a CVSS 3.1 Base Score of 4.9 (Medium severity) with the vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H, indicating network accessibility, low attack complexity, and high privileges required (NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete Denial of Service (DoS) of MySQL Server (NVD).

Oracle has released patches to address this vulnerability in their January 2022 Critical Patch Update. Users are advised to upgrade to versions newer than MySQL 5.7.36 or 8.0.27. The vulnerability has been fixed in MySQL 8.0.28 for both version streams (Fedora Update).