CVE-2022-21348: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) affects versions 8.0.27 and prior. This vulnerability (CVE-2022-21348) was disclosed in January 2022 and impacts the InnoDB component through multiple protocols. The vulnerability allows high privileged attackers with network access to potentially compromise MySQL Server (Oracle Advisory, NVD).

The vulnerability has a CVSS 3.1 Base Score of 4.9 (Medium) with the vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. This indicates that the vulnerability requires network access, has low attack complexity, requires high privileges, needs no user interaction, has no impact on confidentiality or integrity, but can have a high impact on availability (Oracle Advisory, NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete denial of service (DoS) of MySQL Server (NVD).

Oracle has released security patches to address this vulnerability. Users should upgrade to versions newer than MySQL 8.0.27. The fix was included in Oracle's Critical Patch Update of January 2022 (Oracle Advisory).