CVE-2023-21955: 
MySQL vulnerability analysis and mitigation

CVE-2023-21955 is a vulnerability discovered in the MySQL Server product of Oracle MySQL, specifically affecting the Server: Partition component. The vulnerability affects MySQL Server versions 8.0.32 and prior. This security issue was disclosed as part of Oracle's April 2023 Critical Patch Update (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.9 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability is characterized as easily exploitable, requiring high privileges and network access via multiple protocols to compromise MySQL Server (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete Denial of Service (DoS) of MySQL Server. The vulnerability only affects availability, with no impact on confidentiality or integrity (Oracle Advisory).

The vulnerability requires high privileges and network access for exploitation. It is described as easily exploitable when these conditions are met, allowing an attacker with the necessary privileges to compromise MySQL Server through multiple protocols (NVD).

Oracle has released patches to address this vulnerability in MySQL version 8.0.33. Users are strongly recommended to upgrade to this version or later. The fix has been incorporated into various distribution packages, including Fedora's community-mysql-8.0.34 (Fedora Update).