CVE-2021-2009: Medium severity ibm infosphere guardium z/os vulnerability
An unspecified vulnerability in Oracle MySQL Server related to the Server: Security: Roles component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
Other sources
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-2009?
CVE-2021-2009 has been classified as having a high severity due to the potential for denial of service impacting high availability.
How do I fix CVE-2021-2009?
To fix CVE-2021-2009, update the affected Oracle MySQL Server and associated IBM Security Guardium products to their latest patched versions.
Which software is affected by CVE-2021-2009?
CVE-2021-2009 affects various versions of Oracle MySQL Server, IBM InfoSphere Guardium, and several NetApp products.
What types of attacks can exploit CVE-2021-2009?
CVE-2021-2009 can be exploited through unspecified attack vectors that allow authenticated attackers to cause a denial of service.
Is CVE-2021-2009 related to any specific versions of MySQL?
Yes, CVE-2021-2009 specifically affects MySQL versions between 8.0.0 and 8.0.19.