CVE-2022-21484: 
MySQL vulnerability analysis and mitigation

The vulnerability (CVE-2022-21484) affects the MySQL Cluster product of Oracle MySQL (component: Cluster: General). The affected versions include MySQL Cluster versions 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior, and 8.0.28 and prior. This vulnerability was disclosed as part of Oracle's Critical Patch Update in April 2022 (Oracle CPU).

The vulnerability is classified as difficult to exploit and requires a high-privileged attacker with access to the physical communication segment attached to the hardware where MySQL Cluster executes. The vulnerability has a CVSS 3.1 Base Score of 2.9 (Low), with impacts on Confidentiality and Availability. The CVSS Vector is (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L) (NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster (CVE Mitre).

Oracle has addressed this vulnerability in their April 2022 Critical Patch Update. Users should upgrade to the latest supported versions of MySQL Cluster that include the security fixes (Oracle CPU).