PT-2022-5163 · Oracle+7 · Mysql Server+6

Published

2022-01-20

·

Updated

2025-06-10

·

CVE-2022-21595

CVSS v2.0

4.9

Medium

VectorAV:N/AC:H/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.36 and prior MySQL Server versions 8.0.27 and prior
Description The issue exists due to insufficient input validation in the C API component of MySQL Server. This allows a remote attacker to cause a denial of service. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of MySQL Server.
Recommendations For versions 5.7.36 and prior, update to a version later than 5.7.36 to resolve the issue. For versions 8.0.27 and prior, update to a version later than 8.0.27 to resolve the issue. As a temporary workaround, consider restricting network access to the MySQL Server to minimize the risk of exploitation.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2022-1100
ALT-PU-2022-2171
ALT-PU-2022-2360
ALT-PU-2022-2446
ALT-PU-2023-1583
ALT-PU-2023-1912
ALT-PU-2023-6462
ALT-PU-2023-7310
ALT-PU-2023-7463
ALT-PU-2023-7647
ALT-PU-2023-7888
BDU:2022-06420
BIT-MARIADB-2022-21595
BIT-MARIADB-MIN-2022-21595
BIT-MYSQL-CLIENT-2022-21595
CESA-2022_5826
CESA-2022_6443
CESA-2022_7119
CVE-2022-21595
RHSA-2022:5759
RHSA-2022:5826
RHSA-2022:5948
RHSA-2022:6306
RHSA-2022:6443
RHSA-2022:6518
RHSA-2022:7119
RHSA-2022_5826
RHSA-2022_5948
RHSA-2022_6443
RHSA-2022_7119
RHSA-2023:6821
RLSA-2022:5826
RLSA-2022:5948
RLSA-2022:6443
RLSA-2022:7119
ROSA-SA-2023-2253
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1
SUSE-SU-2023:0631-1
SUSE-SU-2023_0631-1

Affected Products

Alt Linux
Centos
Mariadb Server
Mysql Server
Red Hat
Rocky Linux
Suse