PT-2021-2899 · Oracle+11 · Mysql Server+10

Published 2021-04-20 · Updated 2025-06-10 · CVE-2021-2154

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.7.33 and prior

Description The issue is related to insufficient input validation in the Server: DML component of Oracle MySQL Server. This allows a remote attacker to cause a denial of service using the MySQL network protocol. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of MySQL Server.

Recommendations For versions 5.7.33 and prior, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2022:1556

ALSA-2022:1557

ALT-PU-2021-1686

ALT-PU-2021-2179

ALT-PU-2021-2222

ALT-PU-2021-2236

ALT-PU-2021-2380

ALT-PU-2021-3668

BDU:2021-02468

BIT-MARIADB-2021-2154

BIT-MARIADB-MIN-2021-2154

BIT-MYSQL-CLIENT-2021-2154

CESA-2022_1556

CESA-2022_1557

CVE-2021-2154

MGASA-2021-0211

OPENSUSE-SU-2021:2605-1

OPENSUSE-SU-2021:2616-1

OPENSUSE-SU-2021:2617-1

OPENSUSE-SU-2021_2605-1

OPENSUSE-SU-2021_2616-1

OPENSUSE-SU-2021_2617-1

OPENSUSE-SU-2024:11038-1

OPENSUSE-SU-2024:11648-1

RHSA-2022:1007

RHSA-2022:1010

RHSA-2022:1556

RHSA-2022:1557

RHSA-2022:4818

RHSA-2022_1556

RHSA-2022_1557

RHSA-2023:6821

RLSA-2022:1556

RLSA-2022:1557

SUSE-RU-2023:3956-1

SUSE-RU-2023:4991-1

SUSE-SU-2021:2605-1

SUSE-SU-2021:2616-1

SUSE-SU-2021:2617-1

SUSE-SU-2021:2634-1

USN-4952-1

USN-5022-3

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Mariadb Server

Mysql Server

Red Hat

Rocky Linux

Suse

Ubuntu

References · 565

• 🔥 https://github.com/riptl/cve-2021-3449 · Exploit
• 🔥 https://github.com/terorie/cve-2021-3449 · Exploit
• 🔥 https://github.com/motikan2010/CVE-2020-5398 · Exploit
• 🔥 https://github.com/Al1ex/CVE-2021-27928 · Exploit
• 🔥 https://github.com/LeadroyaL/cve-2019-14540-exploit · Exploit
• 🔥 https://github.com/irsl/CVE-2020-1967 · Exploit
• 🔥 https://github.com/MBHudson/CVE-2020-1971 · Exploit
• 🔥❌ https://github.com/GatoGamer1155/CVE-2021-27928 · Exploit, Deleted
• https://errata.almalinux.org/8/ALSA-2022-1556.html · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-2021-2154 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0211 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-2171 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-2390 · Vendor Advisory
• https://security.gentoo.org/glsa/202105-27 · Vendor Advisory