CVE-2021-35604

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
oraclemysql_server
5.7.0 ≤
𝑥
≤ 5.7.35
oraclemysql_server
8.0.0 ≤
𝑥
≤ 8.0.26
netapponcommand_insight
-
netappsnapcenter
-
mariadbmariadb
10.2.0 ≤
𝑥
< 10.2.41
mariadbmariadb
10.3.0 ≤
𝑥
< 10.3.32
mariadbmariadb
10.4.0 ≤
𝑥
< 10.4.22
mariadbmariadb
10.5.0 ≤
𝑥
< 10.5.13
mariadbmariadb
10.6.0 ≤
𝑥
< 10.6.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mariadb-10.5
bullseye
1:10.5.23-0+deb11u1
fixed
bullseye (security)
1:10.5.26-0+deb11u2
fixed
mysql-8.0
sid
8.0.40-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mariadb-10.0
bionic
dne
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
needs-triage
mariadb-10.1
bionic
needs-triage
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
mariadb-10.3
bionic
dne
focal
Fixed 1:10.3.32-0ubuntu0.20.04.1
released
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
mariadb-10.5
bionic
dne
focal
dne
hirsute
Fixed 1:10.5.13-0ubuntu0.21.04.1
released
impish
Fixed 1:10.5.13-0ubuntu0.21.10.1
released
trusty
dne
xenial
dne
mariadb-5.5
bionic
dne
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
mysql-5.5
bionic
dne
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
vivid
dne
xenial
dne
mysql-5.6
bionic
dne
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
mysql-5.7
bionic
Fixed 5.7.36-0ubuntu0.18.04.1
released
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
Fixed 5.7.36-0ubuntu0.16.04.1+esm1
released
mysql-8.0
bionic
dne
focal
Fixed 8.0.27-0ubuntu0.20.04.1
released
hirsute
Fixed 8.0.27-0ubuntu0.21.04.1
released
impish
Fixed 8.0.27-0ubuntu0.21.10.1
released
jammy
Fixed 8.0.27-0ubuntu0.21.10.1
released
kinetic
Fixed 8.0.27-0ubuntu0.21.10.1
released
lunar
Fixed 8.0.27-0ubuntu0.21.10.1
released
mantic
Fixed 8.0.27-0ubuntu0.21.10.1
released
noble
Fixed 8.0.27-0ubuntu0.21.10.1
released
trusty
dne
xenial
dne
percona-server-5.6
bionic
dne
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
needs-triage
percona-xtradb-cluster-5.5
bionic
dne
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
percona-xtradb-cluster-5.6
bionic
dne
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
liblz4-1
suse enterprise sap 12 SP5
1.8.0-3.5.2
fixed
suse enterprise server 12 SP5
1.8.0-3.5.2
fixed
libmariadb3
suse enterprise sap 12 SP5
3.1.22-2.35.1
fixed
suse enterprise server 12 SP5
3.1.22-2.35.1
fixed
libmariadb_plugins
suse enterprise sap 12 SP5
3.1.22-2.35.1
fixed
suse enterprise server 12 SP5
3.1.22-2.35.1
fixed
libmariadbd-devel
suse enterprise sap 15 SP2
10.4.22-3.22.1
fixed
suse enterprise sap 15 SP3
10.5.13-3.12.1
fixed
suse enterprise sap 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise sap 15 SP7
11.4.5-150700.1.2
fixed
suse enterprise server 15 SP2
10.4.22-3.22.1
fixed
suse enterprise server 15 SP3
10.5.13-3.12.1
fixed
suse enterprise server 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise server 15 SP7
11.4.5-150700.1.2
fixed
libmariadbd104-devel
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
libmariadbd19
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise sap 15 SP2
10.4.22-3.22.1
fixed
suse enterprise sap 15 SP3
10.5.13-3.12.1
fixed
suse enterprise sap 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise sap 15 SP7
11.4.5-150700.1.2
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
suse enterprise server 15 SP2
10.4.22-3.22.1
fixed
suse enterprise server 15 SP3
10.5.13-3.12.1
fixed
suse enterprise server 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise server 15 SP7
11.4.5-150700.1.2
fixed
libmysqld-devel
suse enterprise server 15
10.2.41-3.48.1
fixed
suse enterprise server 15 SP1
10.2.41-3.48.1
fixed
libmysqld19
suse enterprise server 15
10.2.41-3.48.1
fixed
suse enterprise server 15 SP1
10.2.41-3.48.1
fixed
mariadb
suse enterprise sap 12 SP5
10.2.41-3.44.3
fixed
suse enterprise sap 15 SP2
10.4.22-3.22.1
fixed
suse enterprise sap 15 SP3
10.5.13-3.12.1
fixed
suse enterprise sap 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise sap 15 SP7
11.4.5-150700.1.2
fixed
suse enterprise server 12 SP4
10.2.41-3.44.3
fixed
suse enterprise server 12 SP5
10.2.41-3.44.3
fixed
suse enterprise server 15
10.2.41-3.48.1
fixed
suse enterprise server 15 SP1
10.2.41-3.48.1
fixed
suse enterprise server 15 SP2
10.4.22-3.22.1
fixed
suse enterprise server 15 SP3
10.5.13-3.12.1
fixed
suse enterprise server 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise server 15 SP7
11.4.5-150700.1.2
fixed
mariadb-client
suse enterprise sap 12 SP5
10.2.41-3.44.3
fixed
suse enterprise sap 15 SP2
10.4.22-3.22.1
fixed
suse enterprise sap 15 SP3
10.5.13-3.12.1
fixed
suse enterprise sap 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise sap 15 SP7
11.4.5-150700.1.2
fixed
suse enterprise server 12 SP4
10.2.41-3.44.3
fixed
suse enterprise server 12 SP5
10.2.41-3.44.3
fixed
suse enterprise server 15
10.2.41-3.48.1
fixed
suse enterprise server 15 SP1
10.2.41-3.48.1
fixed
suse enterprise server 15 SP2
10.4.22-3.22.1
fixed
suse enterprise server 15 SP3
10.5.13-3.12.1
fixed
suse enterprise server 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise server 15 SP7
11.4.5-150700.1.2
fixed
mariadb-errormessages
suse enterprise sap 12 SP5
10.2.41-3.44.3
fixed
suse enterprise sap 15 SP2
10.4.22-3.22.1
fixed
suse enterprise sap 15 SP3
10.5.13-3.12.1
fixed
suse enterprise sap 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise sap 15 SP7
11.4.5-150700.1.2
fixed
suse enterprise server 12 SP4
10.2.41-3.44.3
fixed
suse enterprise server 12 SP5
10.2.41-3.44.3
fixed
suse enterprise server 15
10.2.41-3.48.1
fixed
suse enterprise server 15 SP1
10.2.41-3.48.1
fixed
suse enterprise server 15 SP2
10.4.22-3.22.1
fixed
suse enterprise server 15 SP3
10.5.13-3.12.1
fixed
suse enterprise server 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise server 15 SP7
11.4.5-150700.1.2
fixed
mariadb-tools
suse enterprise sap 12 SP5
10.2.41-3.44.3
fixed
suse enterprise sap 15 SP2
10.4.22-3.22.1
fixed
suse enterprise sap 15 SP3
10.5.13-3.12.1
fixed
suse enterprise sap 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise sap 15 SP7
11.4.5-150700.1.2
fixed
suse enterprise server 12 SP4
10.2.41-3.44.3
fixed
suse enterprise server 12 SP5
10.2.41-3.44.3
fixed
suse enterprise server 15
10.2.41-3.48.1
fixed
suse enterprise server 15 SP1
10.2.41-3.48.1
fixed
suse enterprise server 15 SP2
10.4.22-3.22.1
fixed
suse enterprise server 15 SP3
10.5.13-3.12.1
fixed
suse enterprise server 15 SP4
10.6.7-150400.1.4
fixed
suse enterprise server 15 SP7
11.4.5-150700.1.2
fixed
mariadb104
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
mariadb104-bench
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
mariadb104-client
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
mariadb104-errormessages
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
mariadb104-galera
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
mariadb104-rpm-macros
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
mariadb104-test
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
mariadb104-tools
suse enterprise sap 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 12 SP5
10.4.30-8.5.46
fixed
suse enterprise server 15 SP1
10.4.30-150100.3.5.10
fixed
python3-mysqlclient
suse enterprise sap 12 SP5
1.3.14-8.9.2
fixed
suse enterprise server 12 SP5
1.3.14-8.9.2
fixed
suse enterprise server 15 SP1
1.4.6-150100.3.3.7
fixed
References
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2UTW5KMPPDKIMGB4ULE2HS22HYLVKYIH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MLAXYFLUDC636S46X34USCLDZAOFBM2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PRCU3RTIPVKPC3GMC76YW7DJEXUEY6FG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VGR5ZTB5QEDRRC6G5U6TFNCIVBBKGS5J/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XF3ZFPL3JJ26YRUGXLXQZYJBLZV3WC2C/
https://security.netapp.com/advisory/ntap-20211022-0003/
https://www.oracle.com/security-alerts/cpuoct2021.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2UTW5KMPPDKIMGB4ULE2HS22HYLVKYIH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MLAXYFLUDC636S46X34USCLDZAOFBM2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PRCU3RTIPVKPC3GMC76YW7DJEXUEY6FG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VGR5ZTB5QEDRRC6G5U6TFNCIVBBKGS5J/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XF3ZFPL3JJ26YRUGXLXQZYJBLZV3WC2C/
https://security.netapp.com/advisory/ntap-20211022-0003/
https://www.oracle.com/security-alerts/cpuoct2021.html