PT-2022-1994 · Mysql Server+1 · Mysql Cluster+1

Lucas Leong + 1 · Published 2022-01-19 · Updated 2023-05-30 · CVE-2022-21334

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:A/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MySQL Cluster versions 8.0.27 and prior

Description The issue exists due to insufficient input validation in the MySQL Cluster component. Exploitation of this issue can allow a remote attacker to gain privileged access. The vulnerability is difficult to exploit and requires access to the physical communication segment attached to the hardware where the MySQL Cluster executes. Successful attacks also require human interaction from a person other than the attacker and can result in the takeover of MySQL Cluster.

Recommendations For versions 8.0.27 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2022-1100

ALT-PU-2022-2171

ALT-PU-2023-1912

AZL-7724

BDU:2022-01569

CVE-2022-21334

OESA-2022-1519

ZDI-22-119

Affected Products

Alt Linux

Mysql Cluster

References · 80

• https://nvd.nist.gov/vuln/detail/CVE-2022-21378 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21249 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21309 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21370 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21301 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21308 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21270 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21323 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21362 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21329 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21368 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21330 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21335 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21315 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21379 · Security Note