• CVE-2022-21317

发布时间: 2022年2月11日

修改时间: 2024年10月31日

概要

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).

CVSS v3 指标

NVD openEuler
Confidentiality Low
Attack Vector Adjacent
CVSS评分 N/A 2.9
Attack Complexity High
Privileges Required High
Scope Unchanged
Integrity None
User Interaction Required
Availability Low

安全公告

公告名 概要 发布时间
KylinSec-SA-2022-1748 mysql security update 2022年2月11日

影响产品

产品 状态
KY3.4-4A mysql Fixed
KY3.4-5 mysql Fixed