Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2021-2390
HistoryJul 21, 2021 - 12:00 a.m.

CVE-2021-2390

2021-07-2100:00:00
ubuntu.com
ubuntu.com
18

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

0.159 Low

EPSS

Percentile

96.0%

JSON

Vulnerability in the MySQL Server product of Oracle MySQL (component:
InnoDB). Supported versions that are affected are 5.7.34 and prior and
8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated
attacker with network access via multiple protocols to compromise MySQL
Server. Successful attacks of this vulnerability can result in unauthorized
ability to cause a hang or frequently repeatable crash (complete DOS) of
MySQL Server. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector:
(CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

Notes

Author Note
leosilva since 5.5 is no longer upstream supported and so far we cannot patch it, marking it as ignored.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchmysql-5.7< 5.7.35-0ubuntu0.18.04.1UNKNOWN
ubuntu16.04noarchmysql-5.7< 5.7.35-0ubuntu0.16.04.1+esm1UNKNOWN
ubuntu20.04noarchmysql-8.0< 8.0.26-0ubuntu0.20.04.2UNKNOWN
ubuntu21.04noarchmysql-8.0< 8.0.26-0ubuntu0.21.04.3UNKNOWN
ubuntu21.10noarchmysql-8.0< 8.0.26-0ubuntu1UNKNOWN
ubuntu22.04noarchmysql-8.0< 8.0.26-0ubuntu1UNKNOWN
ubuntu22.10noarchmysql-8.0< 8.0.26-0ubuntu1UNKNOWN
ubuntu23.04noarchmysql-8.0< 8.0.26-0ubuntu1UNKNOWN
ubuntu23.10noarchmysql-8.0< 8.0.26-0ubuntu1UNKNOWN
ubuntu24.04noarchmysql-8.0< 8.0.26-0ubuntu1UNKNOWN
Rows per page:
1-10 of 121

Related

debiancve 1
osv 5
cnvd 1
prion 1
zdi 1
nvd 1
redhatcve 1
veracode 1
cve 1
cvelist 1
nessus 10
openvas 4
ubuntu 2
ibm 1
freebsd 1
redhat 2
oraclelinux 1
rocky 1
almalinux 1
oracle 1
debiancve
debiancve
CVE-2021-2390
2021-07-21 15:15:41
osv
osv
CVE-2021-2390
2021-07-21 15:15:41
mysql-5.7 vulnerabilities
2021-10-07 16:48:49
mysql-5.7, mysql-8.0 vulnerabilities
2021-07-26 14:12:27
cnvd
cnvd
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-54678)
2021-07-21 00:00:00
prion
prion
Design/Logic Flaw
2021-07-21 15:15:00
zdi
zdi
MySQL memcached Plugin Integer Underflow Remote Code Execution Vulnerability
2021-07-22 00:00:00
nvd
nvd
CVE-2021-2390
2021-07-21 15:15:41
redhatcve
redhatcve
CVE-2021-2390
2021-08-10 21:51:09
veracode
veracode
Denial Of Service (DoS)
2021-10-18 14:28:00
cve
cve
CVE-2021-2390
2021-07-21 15:15:41
cvelist
cvelist
CVE-2021-2390
2021-07-20 22:44:04
nessus
nessus
MySQL 5.7.x < 5.7.35 Multiple Vulnerabilities (Jul 2021 CPU)
2021-07-22 00:00:00
Ubuntu 16.04 ESM : MySQL vulnerabilities (USN-5022-3)
2021-10-08 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-5022-1)
2021-07-26 00:00:00
openvas
openvas
Oracle MySQL Server <= 5.7.34 / 8.0 <= 8.0.25 Security Update (cpujul2021) - Windows
2021-07-22 00:00:00
Oracle MySQL Server <= 5.7.34 / 8.0 <= 8.0.25 Security Update (cpujul2021) - Linux
2021-07-22 00:00:00
Ubuntu: Security Advisory (USN-5022-3)
2022-08-26 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2021-10-07 00:00:00
MySQL vulnerabilities
2021-07-26 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by an Oracle MySQL vulnerability
2021-11-05 14:49:08
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2021-07-20 00:00:00
redhat
redhat
(RHSA-2021:3590) Moderate: mysql:8.0 security, bug fix, and enhancement update
2021-09-21 07:13:26
(RHSA-2021:3811) Moderate: rh-mysql80-mysql security, bug fix, and enhancement update
2021-10-12 13:49:17
oraclelinux
oraclelinux
mysql:8.0 security, bug fix, and enhancement update
2021-09-23 00:00:00
rocky
rocky
mysql:8.0 security, bug fix, and enhancement update
2021-09-21 07:13:26
almalinux
almalinux
Moderate: mysql:8.0 security, bug fix, and enhancement update
2021-09-21 07:13:26
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

0.159 Low

EPSS

Percentile

96.0%

JSON
Related for UB:CVE-2021-2390
debiancve1osv5cnvd1prion1zdi1nvd1redhatcve1veracode1cve1cvelist1nessus10openvas4ubuntu2ibm1freebsd1redhat2oraclelinux1rocky1almalinux1oracle1