PT-2022-2020 · Mysql Server+1 · Mysql Cluster+1

Lucas Leong + 1 · Published 2022-01-19 · Updated 2023-05-30 · CVE-2022-21320

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:A/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MySQL Cluster versions 8.0.27 and prior

Description The issue exists due to insufficient input validation in the MySQL Cluster component. It may allow a remote attacker to gain privileged access. The exploitation is difficult and requires access to the physical communication segment attached to the hardware where the MySQL Cluster executes. Successful attacks also require human interaction from a person other than the attacker and can result in the takeover of MySQL Cluster.

Recommendations For versions 8.0.27 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2022-1100

ALT-PU-2022-2171

ALT-PU-2023-1912

AZL-7711

BDU:2022-01616

CVE-2022-21320

OESA-2022-1519

ZDI-22-105

Affected Products

Alt Linux

Mysql Cluster

References · 81

• https://nvd.nist.gov/vuln/detail/CVE-2022-21378 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21249 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21309 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21370 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21301 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21308 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21270 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21323 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21362 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21329 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21368 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21330 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21335 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21315 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21379 · Security Note