Every CVE Search/ Get API key

CVE-2021-2478

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...

4.9 MediumFix available

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.32%Up 2.9 points since Oct 21, 2021
90%50%10%1%

What each source reports

CVE List Score used 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2021-2478
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2021-16936 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2021-16936
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-6jwc-3qgj-xw55 No score

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-6jwc-3qgj-xw55
Updated
2026-11-02
NVD 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2021-2478
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
OSVAZL-6699 4.9

CVE-2021-2478 affecting package mysql for versions less than 8.0.28-1

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
AZL-6699
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2021-2478
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVOESA-2021-1448 7.1

mysql security update

MySQL client programs and shared libraries.

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35645)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35643)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).(CVE-2021-35640)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35644)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35647)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35641)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector:…

Record
OESA-2021-1448
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVOESA-2022-1960 7.1

mysql security update

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35645)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35643)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).(CVE-2021-35640)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35644)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35647)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35641)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35646)

Vulnerability in the…

Record
OESA-2022-1960
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2022:6518 7.2

Red Hat Security Advisory: rh-mysql80-mysql security, bug fix, and enhancement update

Record
RHSA-2022:6518
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:7119 7.2

Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update

Record
RHSA-2022:7119
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:7119 7.2

Moderate: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30).

Security Fix(es):

  • mysql: Server: DML multiple unspecified vulnerabilities (CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2021-2481, CVE-2021-35575, CVE-2021-35577, CVE-2021-35610, CVE-2021-35612, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628, CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35638, CVE-2021-35641, CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645, CVE-2021-35646, CVE-2021-35647, CVE-2022-21253, CVE-2022-21254, CVE-2022-21264, CVE-2022-21278, CVE-2022-21297, CVE-2022-21339, CVE-2022-21342, CVE-2022-21351, CVE-2022-21370, CVE-2022-21378, CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21569, CVE-2022-21265)

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2021-35546, CVE-2022-21344, CVE-2022-21415)

  • mysql: Server: Error Handling unspecified vulnerability (CVE-2021-35596)

  • mysql: C API unspecified vulnerability (CVE-2021-35597)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2021-35602, CVE-2021-35630, CVE-2022-21515)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2021-35604, CVE-2022-21302, CVE-2022-21348, CVE-2022-21352, CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21517, CVE-2022-21537, CVE-2022-21539, CVE-2022-21423)

  • mysql: Server: Group Replication Plugin multiple unspecified vulnerabilities (CVE-2021-35608, CVE-2022-21256, CVE-2022-21379, CVE-2022-21454)

  • mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2021-35622, CVE-2022-21358, CVE-2022-21372, CVE-2022-21538)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2021-35624, CVE-2022-21245, CVE-2021-35625)

  • mysql: Server: GIS unspecified vulnerability (CVE-2021-35631)

  • mysql: Server: Data Dictionary unspecified vulnerability (CVE-2021-35632)

  • mysql: Server: PS unspecified vulnerability (CVE-2021-35637)

  • mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CVE-2021-35639, CVE-2022-21303, CVE-2022-21522, CVE-2022-21534)

  • mysql: Server: FTS multiple unspecified vulnerabilities (CVE-2021-35648, CVE-2022-21427)

  • mysql: Server: Federated multiple unspecified vulnerabilities (CVE-2022-21270, CVE-2022-21547)

  • mysql: Server: Parser unspecified vulnerability (CVE-2022-21304)

  • mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2022-21362, CVE-2022-21374)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2022-21367)

  • mysql: Server: Components Services unspecified vulnerability (CVE-2022-21368)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2022-21425, CVE-2022-21444, CVE-2021-35640, CVE-2022-21249)

  • mysql: Server: PAM Auth Plugin unspecified vulnerability (CVE-2022-21457)

  • mysql: Server: Logging multiple unspecified vulnerabilities (CVE-2022-21460, CVE-2021-35633)

  • mysql: Server: Security: Roles unspecified vulnerability (CVE-2021-35623)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Rebuild mecab due to change in the suffix (from .el8 to .el8.0.0) [Rocky Linux-8] (BZ#2110940)
Record
RLSA-2022:7119
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-2478 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
UBUNTU-CVE-2021-2478
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:7119 No score

Moderate: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30).

Security Fix(es):

  • mysql: Server: DML multiple unspecified vulnerabilities (CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413)
  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2021-2481, CVE-2021-35575, CVE-2021-35577, CVE-2021-35610, CVE-2021-35612, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628, CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35638, CVE-2021-35641, CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645, CVE-2021-35646, CVE-2021-35647, CVE-2022-21253, CVE-2022-21254, CVE-2022-21264, CVE-2022-21278, CVE-2022-21297, CVE-2022-21339, CVE-2022-21342, CVE-2022-21351, CVE-2022-21370, CVE-2022-21378, CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21569, CVE-2022-21265)
  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2021-35546, CVE-2022-21344, CVE-2022-21415)
  • mysql: Server: Error Handling unspecified vulnerability (CVE-2021-35596)
  • mysql: C API unspecified vulnerability (CVE-2021-35597)
  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2021-35602, CVE-2021-35630, CVE-2022-21515)
  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2021-35604, CVE-2022-21302, CVE-2022-21348, CVE-2022-21352, CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21517, CVE-2022-21537, CVE-2022-21539, CVE-2022-21423)
  • mysql: Server: Group Replication Plugin multiple unspecified vulnerabilities (CVE-2021-35608, CVE-2022-21256, CVE-2022-21379, CVE-2022-21454)
  • mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2021-35622, CVE-2022-21358, CVE-2022-21372, CVE-2022-21538)
  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2021-35624, CVE-2022-21245, CVE-2021-35625)
  • mysql: Server: GIS unspecified vulnerability (CVE-2021-35631)
  • mysql: Server: Data Dictionary unspecified vulnerability (CVE-2021-35632)
  • mysql: Server: PS unspecified vulnerability (CVE-2021-35637)
  • mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CVE-2021-35639, CVE-2022-21303, CVE-2022-21522, CVE-2022-21534)
  • mysql: Server: FTS multiple unspecified vulnerabilities (CVE-2021-35648, CVE-2022-21427)
  • mysql: Server: Federated multiple unspecified vulnerabilities (CVE-2022-21270, CVE-2022-21547)
  • mysql: Server: Parser unspecified vulnerability (CVE-2022-21304)
  • mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2022-21362, CVE-2022-21374)
  • mysql: Server: Compiling unspecified vulnerability (CVE-2022-21367)
  • mysql: Server: Components Services unspecified vulnerability (CVE-2022-21368)
  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2022-21425, CVE-2022-21444, CVE-2021-35640, CVE-2022-21249)
  • mysql: Server: PAM Auth Plugin unspecified vulnerability (CVE-2022-21457)
  • mysql: Server: Logging multiple unspecified vulnerabilities (CVE-2022-21460, CVE-2021-35633)
  • mysql: Server: Security: Roles unspecified vulnerability (CVE-2021-35623)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Rebuild mecab due to change in the suffix (from .el8 to .el8.0.0) [almalinux-8] (BZ#2110940)
Record
ALSA-2022:7119
Updated
2026-11-05
OSVCLSA-2022-1669242363 No score

mysql: Fix of 114 CVEs

  • Update to MySQL 8.0.30
  • CVEs fixed: CVE-2021-2478 CVE-2021-2479 CVE-2021-2481 CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591 CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607 CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35622 CVE-2021-35623 CVE-2021-35624 CVE-2021-35625 CVE-2021-35626 CVE-2021-35627 CVE-2021-35628 CVE-2021-35630 CVE-2021-35631 CVE-2021-35632 CVE-2021-35633 CVE-2021-35634 CVE-2021-35635 CVE-2021-35636 CVE-2021-35637 CVE-2021-35638 CVE-2021-35639 CVE-2021-35640 CVE-2021-35641 CVE-2021-35642 CVE-2021-35643 CVE-2021-35644 CVE-2021-35645 CVE-2021-35646 CVE-2021-35647 CVE-2021-35648 CVE-2022-21245 CVE-2022-21249 CVE-2022-21253 CVE-2022-21254 CVE-2022-21256 CVE-2022-21264 CVE-2022-21265 CVE-2022-21270 CVE-2022-21278 CVE-2022-21297 CVE-2022-21301 CVE-2022-21302 CVE-2022-21303 CVE-2022-21304 CVE-2022-21339 CVE-2022-21342 CVE-2022-21344 CVE-2022-21348 CVE-2022-21351 CVE-2022-21352 CVE-2022-21358 CVE-2022-21362 CVE-2022-21367 CVE-2022-21368 CVE-2022-21370 CVE-2022-21372 CVE-2022-21374 CVE-2022-21378 CVE-2022-21379 CVE-2022-21412 CVE-2022-21413 CVE-2022-21414 CVE-2022-21415 CVE-2022-21417 CVE-2022-21418 CVE-2022-21423 CVE-2022-21425 CVE-2022-21427 CVE-2022-21435 CVE-2022-21436 CVE-2022-21437 CVE-2022-21438 CVE-2022-21440 CVE-2022-21444 CVE-2022-21451 CVE-2022-21452 CVE-2022-21454 CVE-2022-21455 CVE-2022-21457 CVE-2022-21459 CVE-2022-21460 CVE-2022-21462 CVE-2022-21478 CVE-2022-21479 CVE-2022-21509 CVE-2022-21515 CVE-2022-21517 CVE-2022-21522 CVE-2022-21525 CVE-2022-21526 CVE-2022-21527 CVE-2022-21528 CVE-2022-21529 CVE-2022-21530 CVE-2022-21531 CVE-2022-21534 CVE-2022-21537 CVE-2022-21538 CVE-2022-21539 CVE-2022-21547 CVE-2022-21553 CVE-2022-21556 CVE-2022-21569
Record
CLSA-2022-1669242363
Updated
2026-11-02
OSVCLSA-2022-1669244713 No score

mysql: Fix of 114 CVEs

  • Update to MySQL 8.0.30
  • CVEs fixed: CVE-2021-2478 CVE-2021-2479 CVE-2021-2481 CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591 CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607 CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35622 CVE-2021-35623 CVE-2021-35624 CVE-2021-35625 CVE-2021-35626 CVE-2021-35627 CVE-2021-35628 CVE-2021-35630 CVE-2021-35631 CVE-2021-35632 CVE-2021-35633 CVE-2021-35634 CVE-2021-35635 CVE-2021-35636 CVE-2021-35637 CVE-2021-35638 CVE-2021-35639 CVE-2021-35640 CVE-2021-35641 CVE-2021-35642 CVE-2021-35643 CVE-2021-35644 CVE-2021-35645 CVE-2021-35646 CVE-2021-35647 CVE-2021-35648 CVE-2022-21245 CVE-2022-21249 CVE-2022-21253 CVE-2022-21254 CVE-2022-21256 CVE-2022-21264 CVE-2022-21265 CVE-2022-21270 CVE-2022-21278 CVE-2022-21297 CVE-2022-21301 CVE-2022-21302 CVE-2022-21303 CVE-2022-21304 CVE-2022-21339 CVE-2022-21342 CVE-2022-21344 CVE-2022-21348 CVE-2022-21351 CVE-2022-21352 CVE-2022-21358 CVE-2022-21362 CVE-2022-21367 CVE-2022-21368 CVE-2022-21370 CVE-2022-21372 CVE-2022-21374 CVE-2022-21378 CVE-2022-21379 CVE-2022-21412 CVE-2022-21413 CVE-2022-21414 CVE-2022-21415 CVE-2022-21417 CVE-2022-21418 CVE-2022-21423 CVE-2022-21425 CVE-2022-21427 CVE-2022-21435 CVE-2022-21436 CVE-2022-21437 CVE-2022-21438 CVE-2022-21440 CVE-2022-21444 CVE-2022-21451 CVE-2022-21452 CVE-2022-21454 CVE-2022-21455 CVE-2022-21457 CVE-2022-21459 CVE-2022-21460 CVE-2022-21462 CVE-2022-21478 CVE-2022-21479 CVE-2022-21509 CVE-2022-21515 CVE-2022-21517 CVE-2022-21522 CVE-2022-21525 CVE-2022-21526 CVE-2022-21527 CVE-2022-21528 CVE-2022-21529 CVE-2022-21530 CVE-2022-21531 CVE-2022-21534 CVE-2022-21537 CVE-2022-21538 CVE-2022-21539 CVE-2022-21547 CVE-2022-21553 CVE-2022-21556 CVE-2022-21569
Record
CLSA-2022-1669244713
Updated
2026-11-02
OSVUSN-5123-1 No score

mysql-5.7, mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.27 in Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. Ubuntu 18.04 LTS has been updated to MySQL 5.7.36.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-36.html https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-27.html https://www.oracle.com/security-alerts/cpuoct2021.html

Record
USN-5123-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mecab
AlmaLinux:8
From an advisory covering 125 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 125 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3340+d764b636
2.7.0.20070801-16.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 125 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7
2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 125 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3340+d764b636
2.7.0.20070801-16.module_el8.6.0+3340+d764b636
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 125 CVEs
 before 2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7
2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7
mysql
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-common
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-devel
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-errmsg
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-libs
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
Show 60 moreShow less
Affected packages
PackageAffectedFixed
mysql-server
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql-test
AlmaLinux:8
From an advisory covering 125 CVEs
 before 8.0.30-1.module_el8.6.0+3340+d764b636
8.0.30-1.module_el8.6.0+3340+d764b636
mysql
Azure Linux:2
 before 8.0.28-1
8.0.28-1
mysql
TuxCare:CentOS:8.4
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
mysql-common
TuxCare:CentOS:8.4
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.4
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.4
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.4
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
mysql-server
TuxCare:CentOS:8.4
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
mysql-test
TuxCare:CentOS:8.4
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
8.0.30-1.module_el8.4.0+2091+b8928c02.tuxcare.els1
mysql
TuxCare:CentOS:8.5
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
mysql-common
TuxCare:CentOS:8.5
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.5
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.5
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.5
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
mysql-server
TuxCare:CentOS:8.5
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
mysql-test
TuxCare:CentOS:8.5
From an advisory covering 114 CVEs
 before 8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1
mysql
openEuler:20.03-LTS-SP1
From an advisory covering 44 CVEs
 before 8.0.27-1.oe1
8.0.27-1.oe1
mysql
openEuler:20.03-LTS-SP2
From an advisory covering 44 CVEs
 before 8.0.27-1.oe1
8.0.27-1.oe1
mysql
openEuler:20.03-LTS-SP3
From an advisory covering 44 CVEs
 before 8.0.28-1.oe1
8.0.28-1.oe1
rh-mysql80-mysql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-config-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-icu-data-files
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-server-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
rh-mysql80-mysql-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 125 CVEs
 before 0:8.0.30-1.el7
0:8.0.30-1.el7
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:0.996-2.module+el8.6.0+16523+5cb0e868
0:0.996-2.module+el8.6.0+16523+5cb0e868
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:0.996-2.module+el8.6.0+16523+5cb0e868
0:0.996-2.module+el8.6.0+16523+5cb0e868
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:0.996-2.module+el8.6.0+16523+5cb0e868
0:0.996-2.module+el8.6.0+16523+5cb0e868
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 125 CVEs
 before 0:8.0.30-1.module+el8.6.0+16523+5cb0e868
0:8.0.30-1.module+el8.6.0+16523+5cb0e868
mecab
Rocky Linux:8
From an advisory covering 124 CVEs
 before 0:0.996-2.module+el8.6.0+1057+4d6a1721
0:0.996-2.module+el8.6.0+1057+4d6a1721
mecab-ipadic
Rocky Linux:8
From an advisory covering 124 CVEs
 before 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
mysql
Rocky Linux:8
From an advisory covering 124 CVEs
 before 0:8.0.30-1.module+el8.6.0+1057+4d6a1721
0:8.0.30-1.module+el8.6.0+1057+4d6a1721
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mysql-8.0
Ubuntu:20.04:LTS
 before 8.0.27-0ubuntu0.20.04.1, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 13 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.3
8.0.27-0ubuntu0.20.04.1
mysql-8.0
Ubuntu:22.04:LTS
 before 8.0.27-0ubuntu0.21.10.1, plus listed versions
8.0.26-0ubuntu1
8.0.27-0ubuntu0.21.10.1
mysql-5.7
Ubuntu:18.04:LTS
From an advisory covering 43 CVEs
 before 5.7.36-0ubuntu0.18.04.1, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 14 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.2
5.7.36-0ubuntu0.18.04.1
mysql-8.0
Ubuntu:20.04:LTS
From an advisory covering 43 CVEs
 before 8.0.27-0ubuntu0.20.04.1, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 13 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.3
8.0.27-0ubuntu0.20.04.1

History

History
RecordedChangedSources
affected
facts, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-2478 is a medium vulnerability (CVSS 4.9) in Oracle Mysql, published October 20, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.32%, the 88th percentile. Fixed in mysql 8.0.28-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 497 references and the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open