CVE-2022-21528: 
MySQL vulnerability analysis and mitigation

CVE-2022-21528 is a vulnerability in the MySQL Server product of Oracle MySQL, specifically affecting the Server: Optimizer component. The vulnerability affects MySQL versions 8.0.29 and prior. This security issue was disclosed as part of Oracle's Critical Patch Update in July 2022 (Oracle CPU).

The vulnerability has been assigned a CVSS 3.1 Base Score of 5.5 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H. The vulnerability is easily exploitable and requires high privileged attacker access with network access via multiple protocols to compromise MySQL Server (NVD).

Successful exploitation of this vulnerability can result in two primary impacts: 1) Unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, and 2) Unauthorized update, insert or delete access to some of MySQL Server accessible data (Oracle CPU).

The vulnerability has been fixed in subsequent releases of MySQL. Users are advised to upgrade to MySQL version 8.0.30 or later. Various distributions have released patched versions including Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Fedora (Ubuntu Notice, Fedora Update).