CVE-2022-21368: 
MySQL vulnerability analysis and mitigation

A vulnerability was discovered in the MySQL Server product of Oracle MySQL, specifically in the Server: Components Services component. The vulnerability affects MySQL versions 8.0.27 and prior. This security issue was disclosed in January 2022 (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.7 (Confidentiality, Integrity and Availability impacts) with the vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L. The vulnerability requires a high privileged attacker with network access via multiple protocols to exploit (NVD).

Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data, unauthorized read access to a subset of MySQL Server accessible data, and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server (NVD).

Oracle has released security patches to address this vulnerability. Users should upgrade to MySQL versions newer than 8.0.27. For systems that cannot be immediately upgraded, network access to MySQL servers should be restricted to trusted hosts only (Oracle Advisory).