CVE-2021-2178
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2021-2178- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-16637
6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
EUVD-2021-16637- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m754-h239-fxxf No score
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
GHSA-m754-h239-fxxf- Updated
- 2026-11-02
NVD
6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2021-2178- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
OSV
6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2021-2178- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2021:3590
7.2
Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update
- Record
RHSA-2021:3590- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2021:3811
7.2
Red Hat Security Advisory: rh-mysql80-mysql security, bug fix, and enhancement update
- Record
RHSA-2021:3811- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2021:3590
7.2
Moderate: mysql:8.0 security, bug fix, and enhancement update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.
The following packages have been upgraded to a later upstream version: mysql (8.0.26). (BZ#1996693)
Security Fix(es):
-
mysql: Server: Stored Procedure multiple vulnerabilities (CVE-2020-14672, CVE-2021-2046, CVE-2021-2072, CVE-2021-2081, CVE-2021-2215, CVE-2021-2217, CVE-2021-2293, CVE-2021-2304, CVE-2021-2424)
-
mysql: Server: FTS multiple vulnerabilities (CVE-2020-14765, CVE-2020-14789, CVE-2020-14804)
-
mysql: Server: Optimizer multiple vulnerabilities (CVE-2020-14769, CVE-2020-14773, CVE-2020-14777, CVE-2020-14785, CVE-2020-14793, CVE-2020-14794, CVE-2020-14809, CVE-2020-14830, CVE-2020-14836, CVE-2020-14837, CVE-2020-14839, CVE-2020-14845, CVE-2020-14846, CVE-2020-14861, CVE-2020-14866, CVE-2020-14868, CVE-2020-14888, CVE-2020-14891, CVE-2020-14893, CVE-2021-2001, CVE-2021-2021, CVE-2021-2024, CVE-2021-2030, CVE-2021-2031, CVE-2021-2036, CVE-2021-2055, CVE-2021-2060, CVE-2021-2065, CVE-2021-2070, CVE-2021-2076, CVE-2021-2164, CVE-2021-2169, CVE-2021-2170, CVE-2021-2193, CVE-2021-2203, CVE-2021-2212, CVE-2021-2213, CVE-2021-2230, CVE-2021-2278, CVE-2021-2298, CVE-2021-2299, CVE-2021-2342, CVE-2021-2357, CVE-2021-2367, CVE-2021-2383, CVE-2021-2384, CVE-2021-2387, CVE-2021-2410, CVE-2021-2412, CVE-2021-2418, CVE-2021-2425, CVE-2021-2426, CVE-2021-2427, CVE-2021-2437, CVE-2021-2441, CVE-2021-2444)
-
mysql: InnoDB multiple vulnerabilities (CVE-2020-14775, CVE-2020-14776, CVE-2020-14821, CVE-2020-14829, CVE-2020-14848, CVE-2021-2022, CVE-2021-2028, CVE-2021-2048, CVE-2021-2174, CVE-2021-2180, CVE-2021-2194, CVE-2021-2372, CVE-2021-2374, CVE-2021-2389, CVE-2021-2390, CVE-2021-2429, CVE-2020-14791, CVE-2021-2042)
-
mysql: Server: PS multiple vulnerabilities (CVE-2020-14786, CVE-2020-14790, CVE-2020-14844, CVE-2021-2422)
-
mysql: Server: Security multiple vulnerabilities (CVE-2020-14800, CVE-2020-14838, CVE-2020-14860)
-
mysql: Server: Locking multiple vulnerabilities (CVE-2020-14812, CVE-2021-2058, CVE-2021-2402)
-
mysql: Server: DML multiple vulnerabilities (CVE-2020-14814, CVE-2020-14828, CVE-2021-2056, CVE-2021-2087, CVE-2021-2088, CVE-2021-2166, CVE-2021-2172, CVE-2021-2196, CVE-2021-2300, CVE-2021-2305, CVE-2021-2370, CVE-2021-2440)
-
mysql: Server: Charsets unspecified vulnerability (CVE-2020-14852)
-
mysql: Server: DDL multiple vulnerabilities (CVE-2020-14867, CVE-2021-2061, CVE-2021-2122, CVE-2021-2339, CVE-2021-2352, CVE-2021-2399)
-
mysql: Server: X Plugin unspecified vulnerability (CVE-2020-14870)
-
mysql: Server: Logging unspecified vulnerability (CVE-2020-14873)
-
mysql: Server: Replication multiple vulnerabilities (CVE-2021-2002, CVE-2021-2171, CVE-2021-2178, CVE-2021-2202, CVE-2021-2356, CVE-2021-2385)
-
mysql: C API multiple vulnerabilities (CVE-2021-2010, CVE-2021-2011)
-
mysql: Server: Components Services unspecified vulnerability (CVE-2021-2038)
-
mysql: Server: Options unspecified vulnerability (CVE-2021-2146)
-
mysql: Server: Group Replication Plugin multiple vulnerabilities (CVE-2021-2179, CVE-2021-2232)
-
mysql: Server: Partition multiple vulnerabilities (CVE-2021-2201, CVE-2021-2208)
-
mysql: Server: Information Schema multiple vulnerabilities (CVE-2021-2032, CVE-2021-2226, CVE-2021-2301, CVE-2021-2308)
-
mysql: Server: Packaging unspecified vulnerability (CVE-2021-2307)
-
mysql: Server: Federated unspecified vulnerability (CVE-2021-2354)
-
mysql: Server: GIS unspecified vulnerability (CVE-2021-2417)
-
mysql: Server: Memcached unspecified vulnerability (CVE-2021-2340)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- Segfault and possible DoS with a crafted query (BZ#1996699)
- Record
RLSA-2021:3590- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-2178
6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
- Record
UBUNTU-CVE-2021-2178- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2021:3590 No score
Moderate: mysql:8.0 security, bug fix, and enhancement update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.
The following packages have been upgraded to a later upstream version: mysql (8.0.26). (BZ#1996693)
Security Fix(es):
-
mysql: Server: Stored Procedure multiple vulnerabilities (CVE-2020-14672, CVE-2021-2046, CVE-2021-2072, CVE-2021-2081, CVE-2021-2215, CVE-2021-2217, CVE-2021-2293, CVE-2021-2304, CVE-2021-2424)
-
mysql: Server: FTS multiple vulnerabilities (CVE-2020-14765, CVE-2020-14789, CVE-2020-14804)
-
mysql: Server: Optimizer multiple vulnerabilities (CVE-2020-14769, CVE-2020-14773, CVE-2020-14777, CVE-2020-14785, CVE-2020-14793, CVE-2020-14794, CVE-2020-14809, CVE-2020-14830, CVE-2020-14836, CVE-2020-14837, CVE-2020-14839, CVE-2020-14845, CVE-2020-14846, CVE-2020-14861, CVE-2020-14866, CVE-2020-14868, CVE-2020-14888, CVE-2020-14891, CVE-2020-14893, CVE-2021-2001, CVE-2021-2021, CVE-2021-2024, CVE-2021-2030, CVE-2021-2031, CVE-2021-2036, CVE-2021-2055, CVE-2021-2060, CVE-2021-2065, CVE-2021-2070, CVE-2021-2076, CVE-2021-2164, CVE-2021-2169, CVE-2021-2170, CVE-2021-2193, CVE-2021-2203, CVE-2021-2212, CVE-2021-2213, CVE-2021-2230, CVE-2021-2278, CVE-2021-2298, CVE-2021-2299, CVE-2021-2342, CVE-2021-2357, CVE-2021-2367, CVE-2021-2383, CVE-2021-2384, CVE-2021-2387, CVE-2021-2410, CVE-2021-2412, CVE-2021-2418, CVE-2021-2425, CVE-2021-2426, CVE-2021-2427, CVE-2021-2437, CVE-2021-2441, CVE-2021-2444)
-
mysql: InnoDB multiple vulnerabilities (CVE-2020-14775, CVE-2020-14776, CVE-2020-14821, CVE-2020-14829, CVE-2020-14848, CVE-2021-2022, CVE-2021-2028, CVE-2021-2048, CVE-2021-2174, CVE-2021-2180, CVE-2021-2194, CVE-2021-2372, CVE-2021-2374, CVE-2021-2389, CVE-2021-2390, CVE-2021-2429, CVE-2020-14791, CVE-2021-2042)
-
mysql: Server: PS multiple vulnerabilities (CVE-2020-14786, CVE-2020-14790, CVE-2020-14844, CVE-2021-2422)
-
mysql: Server: Security multiple vulnerabilities (CVE-2020-14800, CVE-2020-14838, CVE-2020-14860)
-
mysql: Server: Locking multiple vulnerabilities (CVE-2020-14812, CVE-2021-2058, CVE-2021-2402)
-
mysql: Server: DML multiple vulnerabilities (CVE-2020-14814, CVE-2020-14828, CVE-2021-2056, CVE-2021-2087, CVE-2021-2088, CVE-2021-2166, CVE-2021-2172, CVE-2021-2196, CVE-2021-2300, CVE-2021-2305, CVE-2021-2370, CVE-2021-2440)
-
mysql: Server: Charsets unspecified vulnerability (CVE-2020-14852)
-
mysql: Server: DDL multiple vulnerabilities (CVE-2020-14867, CVE-2021-2061, CVE-2021-2122, CVE-2021-2339, CVE-2021-2352, CVE-2021-2399)
-
mysql: Server: X Plugin unspecified vulnerability (CVE-2020-14870)
-
mysql: Server: Logging unspecified vulnerability (CVE-2020-14873)
-
mysql: Server: Replication multiple vulnerabilities (CVE-2021-2002, CVE-2021-2171, CVE-2021-2178, CVE-2021-2202, CVE-2021-2356, CVE-2021-2385)
-
mysql: C API multiple vulnerabilities (CVE-2021-2010, CVE-2021-2011)
-
mysql: Server: Components Services unspecified vulnerability (CVE-2021-2038)
-
mysql: Server: Options unspecified vulnerability (CVE-2021-2146)
-
mysql: Server: Group Replication Plugin multiple vulnerabilities (CVE-2021-2179, CVE-2021-2232)
-
mysql: Server: Partition multiple vulnerabilities (CVE-2021-2201, CVE-2021-2208)
-
mysql: Server: Information Schema multiple vulnerabilities (CVE-2021-2032, CVE-2021-2226, CVE-2021-2301, CVE-2021-2308)
-
mysql: Server: Packaging unspecified vulnerability (CVE-2021-2307)
-
mysql: Server: Federated unspecified vulnerability (CVE-2021-2354)
-
mysql: Server: GIS unspecified vulnerability (CVE-2021-2417)
-
mysql: Server: Memcached unspecified vulnerability (CVE-2021-2340)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- Segfault and possible DoS with a crafted query (BZ#1996699)
- Record
ALSA-2021:3590- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mecabAlmaLinux:8 From an advisory covering 141 CVEs |
before 0.996-1.module_el8.4.0+2532+b8928c02.9 | 0.996-1.module_el8.4.0+2532+b8928c02.9 |
mecabAlmaLinux:8 From an advisory covering 141 CVEs |
before 0.996-1.module_el8.5.0+33+8bc5f36a.9 | 0.996-1.module_el8.5.0+33+8bc5f36a.9 |
mecab-ipadicAlmaLinux:8 From an advisory covering 141 CVEs |
before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a | 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a |
mecab-ipadicAlmaLinux:8 From an advisory covering 141 CVEs |
before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 | 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 |
mecab-ipadic-EUCJPAlmaLinux:8 From an advisory covering 141 CVEs |
before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a | 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a |
mecab-ipadic-EUCJPAlmaLinux:8 From an advisory covering 141 CVEs |
before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 | 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 |
mysqlAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.4.0+2532+b8928c02 | 8.0.26-1.module_el8.4.0+2532+b8928c02 |
mysqlAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.5.0+33+8bc5f36a | 8.0.26-1.module_el8.5.0+33+8bc5f36a |
mysql-commonAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.4.0+2532+b8928c02 | 8.0.26-1.module_el8.4.0+2532+b8928c02 |
mysql-commonAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.5.0+33+8bc5f36a | 8.0.26-1.module_el8.5.0+33+8bc5f36a |
Show 48 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-develAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.4.0+2532+b8928c02 | 8.0.26-1.module_el8.4.0+2532+b8928c02 |
mysql-develAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.5.0+33+8bc5f36a | 8.0.26-1.module_el8.5.0+33+8bc5f36a |
mysql-errmsgAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.4.0+2532+b8928c02 | 8.0.26-1.module_el8.4.0+2532+b8928c02 |
mysql-errmsgAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.5.0+33+8bc5f36a | 8.0.26-1.module_el8.5.0+33+8bc5f36a |
mysql-libsAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.4.0+2532+b8928c02 | 8.0.26-1.module_el8.4.0+2532+b8928c02 |
mysql-libsAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.5.0+33+8bc5f36a | 8.0.26-1.module_el8.5.0+33+8bc5f36a |
mysql-serverAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.4.0+2532+b8928c02 | 8.0.26-1.module_el8.4.0+2532+b8928c02 |
mysql-serverAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.5.0+33+8bc5f36a | 8.0.26-1.module_el8.5.0+33+8bc5f36a |
mysql-testAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.4.0+2532+b8928c02 | 8.0.26-1.module_el8.4.0+2532+b8928c02 |
mysql-testAlmaLinux:8 From an advisory covering 141 CVEs |
before 8.0.26-1.module_el8.5.0+33+8bc5f36a | 8.0.26-1.module_el8.5.0+33+8bc5f36a |
mecabRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-ipadicRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de | 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de |
mecab-ipadic-EUCJPRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de | 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de |
mysqlRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-commonRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-develRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-errmsgRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-libsRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-serverRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-server-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-testRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
mysql-test-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+12359+b8928c02 | 0:8.0.26-1.module+el8.4.0+12359+b8928c02 |
rh-mysql80-mysqlRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-commonRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-configRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-config-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-develRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-errmsgRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-serverRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-server-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
rh-mysql80-mysql-testRed Hat:rhel_software_collections:3::el7 From an advisory covering 141 CVEs |
before 0:8.0.26-1.el7 | 0:8.0.26-1.el7 |
mecabRocky Linux:8 From an advisory covering 141 CVEs |
before 0:0.996-1.module+el8.3.0+242+87d3366a.9 | 0:0.996-1.module+el8.3.0+242+87d3366a.9 |
mecab-ipadicRocky Linux:8 From an advisory covering 141 CVEs |
before 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a | 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a |
mysqlRocky Linux:8 From an advisory covering 141 CVEs |
before 0:8.0.26-1.module+el8.4.0+652+6de068a7 | 0:8.0.26-1.module+el8.4.0+652+6de068a7 |
mysql-5.5Ubuntu:14.04:LTS |
All versions, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 20 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1 |
None known |
mysql-5.7Ubuntu:16.04:LTS |
before 5.7.33-0ubuntu0.16.04.1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1 Show 20 moreShow less5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.1 |
5.7.33-0ubuntu0.16.04.1 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2 |
None known |
mysql-5.7Ubuntu:18.04:LTS |
before 5.7.33-0ubuntu0.18.04.1, plus listed versions 5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1 Show 10 moreShow less5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.1 |
5.7.33-0ubuntu0.18.04.1 |
mysql-8.0Ubuntu:20.04:LTS |
before 8.0.23-0ubuntu0.20.04.1, plus listed versions 8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5 Show 9 moreShow less8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.3 |
8.0.23-0ubuntu0.20.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-2178 is a medium vulnerability (CVSS 6.5) in Oracle Mysql, published April 22, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. Fixed in mysql-5.7 5.7.33-0ubuntu0.16.04.1.
References
oracle.com/security-alerts/cpuapr2021.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7
security.netapp.com/advisory/ntap-20210513-0002
nvd.nist.gov/vuln/detail/CVE-2021-2178
Show 194 moreShow less
lists.fedoraproject.org/archives/list/[email protected]/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ
lists.fedoraproject.org/archives/list/[email protected]/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7
lists.fedoraproject.org/archives/list/[email protected]/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ
github.com/advisories/GHSA-m754-h239-fxxf
errata.almalinux.org/8/ALSA-2021-3590.html
vulners.com/cve/CVE-2020-14672
vulners.com/cve/CVE-2020-14765
vulners.com/cve/CVE-2020-14769
vulners.com/cve/CVE-2020-14773
vulners.com/cve/CVE-2020-14775
vulners.com/cve/CVE-2020-14776
vulners.com/cve/CVE-2020-14777
vulners.com/cve/CVE-2020-14785
vulners.com/cve/CVE-2020-14786
vulners.com/cve/CVE-2020-14789
vulners.com/cve/CVE-2020-14790
vulners.com/cve/CVE-2020-14791
vulners.com/cve/CVE-2020-14793
vulners.com/cve/CVE-2020-14794
vulners.com/cve/CVE-2020-14800
vulners.com/cve/CVE-2020-14804
vulners.com/cve/CVE-2020-14809
vulners.com/cve/CVE-2020-14812
vulners.com/cve/CVE-2020-14814
vulners.com/cve/CVE-2020-14821
vulners.com/cve/CVE-2020-14828
vulners.com/cve/CVE-2020-14829
vulners.com/cve/CVE-2020-14830
vulners.com/cve/CVE-2020-14836
vulners.com/cve/CVE-2020-14837
vulners.com/cve/CVE-2020-14838
vulners.com/cve/CVE-2020-14839
vulners.com/cve/CVE-2020-14844
vulners.com/cve/CVE-2020-14845
vulners.com/cve/CVE-2020-14846
vulners.com/cve/CVE-2020-14848
vulners.com/cve/CVE-2020-14852
vulners.com/cve/CVE-2020-14860
vulners.com/cve/CVE-2020-14861
vulners.com/cve/CVE-2020-14866
vulners.com/cve/CVE-2020-14867
vulners.com/cve/CVE-2020-14868
access.redhat.com/errata/RHSA-2021:3590
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1890737
bugzilla.redhat.com/show_bug.cgi?id=1890738
bugzilla.redhat.com/show_bug.cgi?id=1890739
bugzilla.redhat.com/show_bug.cgi?id=1890742
bugzilla.redhat.com/show_bug.cgi?id=1890743
bugzilla.redhat.com/show_bug.cgi?id=1890744
bugzilla.redhat.com/show_bug.cgi?id=1890745
bugzilla.redhat.com/show_bug.cgi?id=1890746
bugzilla.redhat.com/show_bug.cgi?id=1890747
bugzilla.redhat.com/show_bug.cgi?id=1890748
bugzilla.redhat.com/show_bug.cgi?id=1890749
bugzilla.redhat.com/show_bug.cgi?id=1890750
bugzilla.redhat.com/show_bug.cgi?id=1890751
bugzilla.redhat.com/show_bug.cgi?id=1890753
bugzilla.redhat.com/show_bug.cgi?id=1890754
bugzilla.redhat.com/show_bug.cgi?id=1890755
bugzilla.redhat.com/show_bug.cgi?id=1890756
bugzilla.redhat.com/show_bug.cgi?id=1890757
bugzilla.redhat.com/show_bug.cgi?id=1890758
bugzilla.redhat.com/show_bug.cgi?id=1890760
bugzilla.redhat.com/show_bug.cgi?id=1890761
bugzilla.redhat.com/show_bug.cgi?id=1890762
bugzilla.redhat.com/show_bug.cgi?id=1890763
bugzilla.redhat.com/show_bug.cgi?id=1890764
bugzilla.redhat.com/show_bug.cgi?id=1890765
bugzilla.redhat.com/show_bug.cgi?id=1890766
bugzilla.redhat.com/show_bug.cgi?id=1890767
bugzilla.redhat.com/show_bug.cgi?id=1890768
bugzilla.redhat.com/show_bug.cgi?id=1890769
bugzilla.redhat.com/show_bug.cgi?id=1890770
bugzilla.redhat.com/show_bug.cgi?id=1890771
bugzilla.redhat.com/show_bug.cgi?id=1890772
bugzilla.redhat.com/show_bug.cgi?id=1890773
bugzilla.redhat.com/show_bug.cgi?id=1890774
bugzilla.redhat.com/show_bug.cgi?id=1890775
bugzilla.redhat.com/show_bug.cgi?id=1890776
bugzilla.redhat.com/show_bug.cgi?id=1890778
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3590.json
access.redhat.com/security/cve/CVE-2020-14672
cve.org/CVERecord?id=CVE-2020-14672
nvd.nist.gov/vuln/detail/CVE-2020-14672
oracle.com/security-alerts/cpuoct2020.html
access.redhat.com/security/cve/CVE-2020-14765
cve.org/CVERecord?id=CVE-2020-14765
nvd.nist.gov/vuln/detail/CVE-2020-14765
access.redhat.com/security/cve/CVE-2020-14769
cve.org/CVERecord?id=CVE-2020-14769
nvd.nist.gov/vuln/detail/CVE-2020-14769
access.redhat.com/security/cve/CVE-2020-14773
cve.org/CVERecord?id=CVE-2020-14773
nvd.nist.gov/vuln/detail/CVE-2020-14773
access.redhat.com/security/cve/CVE-2020-14775
cve.org/CVERecord?id=CVE-2020-14775
nvd.nist.gov/vuln/detail/CVE-2020-14775
access.redhat.com/security/cve/CVE-2020-14776
cve.org/CVERecord?id=CVE-2020-14776
nvd.nist.gov/vuln/detail/CVE-2020-14776
access.redhat.com/security/cve/CVE-2020-14777
cve.org/CVERecord?id=CVE-2020-14777
nvd.nist.gov/vuln/detail/CVE-2020-14777
access.redhat.com/security/cve/CVE-2020-14785
cve.org/CVERecord?id=CVE-2020-14785
nvd.nist.gov/vuln/detail/CVE-2020-14785
access.redhat.com/security/cve/CVE-2020-14786
cve.org/CVERecord?id=CVE-2020-14786
nvd.nist.gov/vuln/detail/CVE-2020-14786
access.redhat.com/security/cve/CVE-2020-14789
cve.org/CVERecord?id=CVE-2020-14789
nvd.nist.gov/vuln/detail/CVE-2020-14789
access.redhat.com/security/cve/CVE-2020-14790
cve.org/CVERecord?id=CVE-2020-14790
nvd.nist.gov/vuln/detail/CVE-2020-14790
access.redhat.com/security/cve/CVE-2020-14791
cve.org/CVERecord?id=CVE-2020-14791
nvd.nist.gov/vuln/detail/CVE-2020-14791
access.redhat.com/security/cve/CVE-2020-14793
cve.org/CVERecord?id=CVE-2020-14793
nvd.nist.gov/vuln/detail/CVE-2020-14793
access.redhat.com/security/cve/CVE-2020-14794
cve.org/CVERecord?id=CVE-2020-14794
nvd.nist.gov/vuln/detail/CVE-2020-14794
access.redhat.com/security/cve/CVE-2020-14800
cve.org/CVERecord?id=CVE-2020-14800
nvd.nist.gov/vuln/detail/CVE-2020-14800
access.redhat.com/security/cve/CVE-2020-14804
cve.org/CVERecord?id=CVE-2020-14804
nvd.nist.gov/vuln/detail/CVE-2020-14804
access.redhat.com/security/cve/CVE-2020-14809
cve.org/CVERecord?id=CVE-2020-14809
nvd.nist.gov/vuln/detail/CVE-2020-14809
access.redhat.com/security/cve/CVE-2020-14812
cve.org/CVERecord?id=CVE-2020-14812
nvd.nist.gov/vuln/detail/CVE-2020-14812
access.redhat.com/security/cve/CVE-2020-14814
cve.org/CVERecord?id=CVE-2020-14814
nvd.nist.gov/vuln/detail/CVE-2020-14814
access.redhat.com/security/cve/CVE-2020-14821
cve.org/CVERecord?id=CVE-2020-14821
nvd.nist.gov/vuln/detail/CVE-2020-14821
access.redhat.com/security/cve/CVE-2020-14828
cve.org/CVERecord?id=CVE-2020-14828
nvd.nist.gov/vuln/detail/CVE-2020-14828
access.redhat.com/security/cve/CVE-2020-14829
cve.org/CVERecord?id=CVE-2020-14829
nvd.nist.gov/vuln/detail/CVE-2020-14829
access.redhat.com/security/cve/CVE-2020-14830
cve.org/CVERecord?id=CVE-2020-14830
nvd.nist.gov/vuln/detail/CVE-2020-14830
access.redhat.com/security/cve/CVE-2020-14836
cve.org/CVERecord?id=CVE-2020-14836
nvd.nist.gov/vuln/detail/CVE-2020-14836
access.redhat.com/security/cve/CVE-2020-14837
cve.org/CVERecord?id=CVE-2020-14837
nvd.nist.gov/vuln/detail/CVE-2020-14837
access.redhat.com/security/cve/CVE-2020-14838
cve.org/CVERecord?id=CVE-2020-14838
nvd.nist.gov/vuln/detail/CVE-2020-14838
access.redhat.com/security/cve/CVE-2020-14839
cve.org/CVERecord?id=CVE-2020-14839
nvd.nist.gov/vuln/detail/CVE-2020-14839
access.redhat.com/security/cve/CVE-2020-14844
cve.org/CVERecord?id=CVE-2020-14844
nvd.nist.gov/vuln/detail/CVE-2020-14844
access.redhat.com/security/cve/CVE-2020-14845
cve.org/CVERecord?id=CVE-2020-14845
nvd.nist.gov/vuln/detail/CVE-2020-14845
access.redhat.com/security/cve/CVE-2020-14846
cve.org/CVERecord?id=CVE-2020-14846
nvd.nist.gov/vuln/detail/CVE-2020-14846
access.redhat.com/security/cve/CVE-2020-14848
cve.org/CVERecord?id=CVE-2020-14848
nvd.nist.gov/vuln/detail/CVE-2020-14848
access.redhat.com/security/cve/CVE-2020-14852
cve.org/CVERecord?id=CVE-2020-14852
nvd.nist.gov/vuln/detail/CVE-2020-14852
access.redhat.com/security/cve/CVE-2020-14860
cve.org/CVERecord?id=CVE-2020-14860
nvd.nist.gov/vuln/detail/CVE-2020-14860
access.redhat.com/security/cve/CVE-2020-14861
cve.org/CVERecord?id=CVE-2020-14861
nvd.nist.gov/vuln/detail/CVE-2020-14861
access.redhat.com/security/cve/CVE-2020-14866
cve.org/CVERecord?id=CVE-2020-14866
nvd.nist.gov/vuln/detail/CVE-2020-14866
cve.org/CVERecord?id=CVE-2020-14867
nvd.nist.gov/vuln/detail/CVE-2020-14867
oracle.com/security-alerts/cpujan2021.html
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3811.json
errata.rockylinux.org/RLSA-2021:3590
ubuntu.com/security/CVE-2021-2178
Left out here: 528 references. The JSON record has them.