CVE-2023-21865: 
MySQL vulnerability analysis and mitigation

CVE-2023-21865 is a vulnerability in the MySQL Server product of Oracle MySQL, specifically affecting the Server Optimizer component. The vulnerability affects MySQL Server versions 8.0.30 and prior. This security flaw was disclosed as part of Oracle's January 2023 Critical Patch Update (Oracle CPU).

The vulnerability is classified as easily exploitable and allows high privileged attackers with network access via multiple protocols to compromise MySQL Server. The vulnerability has received a CVSS 3.1 Base Score of 4.9 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (Oracle CPU).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete denial of service (DOS) of MySQL Server. The vulnerability primarily impacts the availability of the system, with no direct effects on confidentiality or integrity (Oracle CPU).

The vulnerability is considered easily exploitable but requires a high-privileged attacker with network access. The attack can be conducted via multiple protocols, though specific exploit details have not been publicly disclosed (Oracle CPU).

Oracle has released patches for this vulnerability as part of its January 2023 Critical Patch Update. Users are strongly advised to update to versions newer than MySQL 8.0.30. Red Hat has also released security updates for affected versions in their Red Hat Software Collections (Red Hat Advisory).