CVE-2021-35618
First published: Wed Oct 20 2021(Updated: )
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 1.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle MySQL Cluster | >=8.0.0<=8.0.26 | |
| NetApp Active IQ Unified Manager for VMware vSphere | ||
| NetApp Active IQ Unified Manager | ||
| NetApp OnCommand Insight | ||
| NetApp OnCommand Workflow Automation | ||
| NetApp SnapCenter |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-35618?
CVE-2021-35618 is a difficult to exploit vulnerability with a high privilege access requirement.
How do I fix CVE-2021-35618?
To mitigate CVE-2021-35618, upgrade to MySQL Cluster versions later than 8.0.26.
Who is affected by CVE-2021-35618?
CVE-2021-35618 affects Oracle MySQL Cluster versions 8.0.26 and earlier.
What type of vulnerability is CVE-2021-35618?
CVE-2021-35618 is identified as a vulnerability in the MySQL Cluster component of Oracle MySQL.
Can CVE-2021-35618 be exploited remotely?
No, CVE-2021-35618 requires a high privileged attacker with access to the physical communication segment.
- agent/references
- agent/type
- agent/author
- agent/description
- agent/severity
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle mysql cluster
- version/oracle mysql cluster/8.0.0
- version/oracle mysql cluster/8.0.26
- vendor/netapp
- canonical/netapp active iq unified manager for vmware vsphere
- canonical/netapp active iq unified manager
- canonical/netapp oncommand insight
- canonical/netapp oncommand workflow automation
- canonical/netapp snapcenter