CVE-2022-21344: 
MySQL vulnerability analysis and mitigation

A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) affects versions 5.7.36 and prior, and 8.0.27 and prior. This easily exploitable vulnerability (CVE-2022-21344) allows high privileged attackers with network access via multiple protocols to compromise MySQL Server (Oracle CPU Jan 2022).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.9 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability specifically affects the Replication component of MySQL Server and requires network access for exploitation (NVD, NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (Oracle CPU Jan 2022).

The vulnerability is considered easily exploitable but requires high privileges and network access via multiple protocols. No user interaction is needed for exploitation. The attack complexity is rated as Low, indicating relatively straightforward exploitation methods (NetApp Advisory).

Oracle has released security patches to address this vulnerability. Users should upgrade to versions later than MySQL 5.7.36 or 8.0.27. The patches are available through Oracle's Critical Patch Update program (Oracle CPU Jan 2022).