CVE-2022-21362: 
MySQL vulnerability analysis and mitigation

CVE-2022-21362 is a vulnerability in the MySQL Server product of Oracle MySQL, specifically affecting the Server: Information Schema component. The vulnerability affects MySQL versions 8.0.27 and prior. This easily exploitable vulnerability allows high-privileged attackers with network access via multiple protocols to compromise MySQL Server (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.9 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability requires network access and high privileges to exploit, but has low attack complexity and requires no user interaction (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete denial of service (DoS) of MySQL Server. The vulnerability impacts only the availability of the system, with no direct effects on confidentiality or integrity (Oracle Advisory).

Oracle has released patches to address this vulnerability in the January 2022 Critical Patch Update. Users should upgrade to MySQL versions newer than 8.0.27. For systems that cannot be immediately updated, network access controls and privilege restrictions should be implemented to reduce the risk of exploitation (Oracle Advisory, NetApp Advisory).