CVE-2021-2471
Incorrect Authorization in MySQL Connector Java
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
- Record
CVE-2021-2471- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2022-5511
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
- Record
EUVD-2022-5511- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w6f2-8wx4-47r5
Incorrect Authorization in MySQL Connector Java
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
- Record
GHSA-w6f2-8wx4-47r5- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
NVD
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
- Record
CVE-2021-2471- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H - CVSS 2.0
- 7.9 High
AV:N/AC:M/Au:S/C:C/I:N/A:C - Updated
- 2026-11-02
OSV
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
- Record
CVE-2021-2471- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-w6f2-8wx4-47r5
Incorrect Authorization in MySQL Connector Java
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
- Record
GHSA-w6f2-8wx4-47r5- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
Show 8 moreShow less
OSVOESA-2021-1448
mysql security update
MySQL client programs and shared libraries.
Security Fix(es):
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35645)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35643)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).(CVE-2021-35640)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35644)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35647)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35641)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector:…
- Record
OESA-2021-1448- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2022-1960
mysql security update
Security Fix(es):
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35645)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35643)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).(CVE-2021-35640)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35644)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35647)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35641)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2021-35646)
Vulnerability in the…
- Record
OESA-2022-1960- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2024-1103
mysql-connector-java security update
Official JDBC driver for MySQL.
Security Fix(es):
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).(CVE-2021-2471)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).(CVE-2022-21363)
- Record
OESA-2024-1103- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-2471
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
- Record
UBUNTU-CVE-2021-2471- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1775521830 No score
TuxCare security update for mysql:mysql-connector-java (1 CVE)
TuxCare rebuilt mysql:mysql-connector-java to address 1 CVE. Fixed in 5.1.49-tuxcare.1.
- Record
CLSA-2026-1775521830- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0658-1 No score
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues:
- CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors (bsc#1195557).
- Record
openSUSE-SU-2022:0658-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11883-1 No score
mysql-connector-java-8.0.28-1.1 on GA media
These are all security issues fixed in the mysql-connector-java-8.0.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11883-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1142-1 No score
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues:
- CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors (bsc#1195557).
- Record
SUSE-SU-2022:1142-1- Updated
- 2026-11-02
Affected products
- oracle mysql connectors
- oracle communications cloud native core console
- oracle communications cloud native core network slice selection function
- oracle communications cloud native core policy
- oracle communications cloud native core security edge protection proxy
- oracle corporation mysql connectors
- quarkus
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql:mysql-connector-javaMaven |
8.0.0 to 8.0.26 | 8.0.27 |
mysql:mysql-connector-javaTuxCare:Maven |
5.1.49 up to 5.1.49-tuxcare.1 | 5.1.49-tuxcare.1 |
mysql:mysql-connector-javaMaven |
8.0.0 up to 8.0.27, plus listed versions 8.0.118.0.128.0.138.0.148.0.15 Show 14 moreShow less8.0.168.0.178.0.188.0.198.0.208.0.218.0.228.0.238.0.248.0.258.0.268.0.7-dmr8.0.8-dmr8.0.9-rc |
8.0.27 |
mysqlopenEuler:20.03-LTS-SP1 From an advisory covering 44 CVEs |
before 8.0.27-1.oe1 | 8.0.27-1.oe1 |
mysqlopenEuler:20.03-LTS-SP2 From an advisory covering 44 CVEs |
before 8.0.27-1.oe1 | 8.0.27-1.oe1 |
mysqlopenEuler:20.03-LTS-SP3 From an advisory covering 44 CVEs |
before 8.0.28-1.oe1 | 8.0.28-1.oe1 |
mysql-connector-javaopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 8.0.30-1.oe1 | 8.0.30-1.oe1 |
mysql-connector-javaopenEuler:20.03-LTS-SP4 From an advisory covering 2 CVEs |
before 8.0.30-1.oe2003sp4 | 8.0.30-1.oe2003sp4 |
mysql-connector-javaopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 8.0.30-1.oe2203sp3 | 8.0.30-1.oe2203sp3 |
mysql-connector-javaopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 8.0.30-1.oe2203sp1 | 8.0.30-1.oe2203sp1 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-connector-javaopenEuler:22.03-LTS-SP2 From an advisory covering 2 CVEs |
before 8.0.30-1.oe2203sp2 | 8.0.30-1.oe2203sp2 |
mysql-connector-javaopenEuler:22.03-LTS-SP3 From an advisory covering 2 CVEs |
before 8.0.30-1.oe2203sp3 | 8.0.30-1.oe2203sp3 |
mysql-connector-javaSUSE:HPE Helion OpenStack 8 |
before 8.0.25-5.13.1 | 8.0.25-5.13.1 |
mysql-connector-javaSUSE:OpenStack Cloud 8 |
before 8.0.25-5.13.1 | 8.0.25-5.13.1 |
mysql-connector-javaSUSE:OpenStack Cloud 9 |
before 8.0.25-5.13.1 | 8.0.25-5.13.1 |
mysql-connector-javaSUSE:OpenStack Cloud Crowbar 8 |
before 8.0.25-5.13.1 | 8.0.25-5.13.1 |
mysql-connector-javaSUSE:OpenStack Cloud Crowbar 9 |
before 8.0.25-5.13.1 | 8.0.25-5.13.1 |
mysql-connector-javaSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 8.0.25-5.13.1 | 8.0.25-5.13.1 |
mysql-5.5Ubuntu:14.04:LTS |
All versions, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 20 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1 |
None known |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2 |
None known |
mysql-8.0Ubuntu:20.04:LTS |
before 8.0.27-0ubuntu0.20.04.1, plus listed versions 8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5 Show 13 moreShow less8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.3 |
8.0.27-0ubuntu0.20.04.1 |
mysql-8.0Ubuntu:22.04:LTS |
before 8.0.27-0ubuntu0.21.10.1, plus listed versions 8.0.26-0ubuntu1 |
8.0.27-0ubuntu0.21.10.1 |
mysql-connector-javaopenSUSE:Leap 15.3 |
before 5.1.47-3.6.1 | 5.1.47-3.6.1 |
mysql-connector-javaopenSUSE:Tumbleweed |
before 8.0.28-1.1 | 8.0.28-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | DrunkenShells/CVE-2021-2471 | 2021-10-22 |
| PoC in GitHub | SecCoder-Security-Lab/jdbc-sqlxml-xxe | 2021-10-22 |
| PoC in GitHub | cckuailong/CVE-2021-2471 | 2021-10-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-2471 is a medium vulnerability (CVSS 5.9) in Oracle Mysql Connectors, published October 20, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.49%, the 94th percentile. Fixed in mysql:mysql-connector-java 8.0.27.
References
oracle.com/security-alerts/cpuoct2021.html
nvd.nist.gov/vuln/detail/CVE-2021-2471
github.com/advisories/GHSA-w6f2-8wx4-47r5
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1448
Show 52 moreShow less
suse.com/support/update/announcement/2022/suse-su-20221142-1
bugzilla.suse.com/1195557
ubuntu.com/security/CVE-2021-2471
cve.org/CVERecord?id=CVE-2021-2471
lists.opensuse.org/archives/list/[email protected]/thread/FPABDE53LLJDPCFTIOU2DXOPZRS7JPVT
Left out here: the rest of 2 source descriptions. The JSON record has them.