CVE-2021-2385 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-2385 Interim 1 11 2025-02-17T01:02:58Z current 2021-07-22T00:43:57Z 2025-02-17T01:02:58Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-2385 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Liberty Linux 8 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 libmariadbd-devel libmariadbd19 libmysqlclient18 libmysqlclient18-32bit mariadb mariadb-client mariadb-errormessages mariadb-galera mariadb-tools mecab-0.996-1.module+el8.0.0+3898+e09bb8de.9 mecab-ipadic-2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de mecab-ipadic-EUCJP-2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de mysql-8.0.26-1.module+el8.4.0+12359+b8928c02 mysql-common-8.0.26-1.module+el8.4.0+12359+b8928c02 mysql-devel-8.0.26-1.module+el8.4.0+12359+b8928c02 mysql-errmsg-8.0.26-1.module+el8.4.0+12359+b8928c02 mysql-libs-8.0.26-1.module+el8.4.0+12359+b8928c02 mysql-server-8.0.26-1.module+el8.4.0+12359+b8928c02 mysql-test-8.0.26-1.module+el8.4.0+12359+b8928c02 mecab-0.996-1.module+el8.0.0+3898+e09bb8de.9 as a component of SUSE Liberty Linux 8 mecab-ipadic-2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de as a component of SUSE Liberty Linux 8 mecab-ipadic-EUCJP-2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de as a component of SUSE Liberty Linux 8 mysql-8.0.26-1.module+el8.4.0+12359+b8928c02 as a component of SUSE Liberty Linux 8 mysql-common-8.0.26-1.module+el8.4.0+12359+b8928c02 as a component of SUSE Liberty Linux 8 mysql-devel-8.0.26-1.module+el8.4.0+12359+b8928c02 as a component of SUSE Liberty Linux 8 mysql-errmsg-8.0.26-1.module+el8.4.0+12359+b8928c02 as a component of SUSE Liberty Linux 8 mysql-libs-8.0.26-1.module+el8.4.0+12359+b8928c02 as a component of SUSE Liberty Linux 8 mysql-server-8.0.26-1.module+el8.4.0+12359+b8928c02 as a component of SUSE Liberty Linux 8 mysql-test-8.0.26-1.module+el8.4.0+12359+b8928c02 as a component of SUSE Liberty Linux 8 libmysqlclient18 as a component of HPE Helion OpenStack 8 libmysqlclient18-32bit as a component of HPE Helion OpenStack 8 mariadb as a component of HPE Helion OpenStack 8 mariadb-client as a component of HPE Helion OpenStack 8 mariadb-errormessages as a component of HPE Helion OpenStack 8 mariadb-galera as a component of HPE Helion OpenStack 8 mariadb-tools as a component of HPE Helion OpenStack 8 libmariadbd-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libmariadbd19 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 mariadb as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 mariadb-client as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 mariadb-errormessages as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 mariadb-tools as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libmysqlclient18 as a component of SUSE OpenStack Cloud 8 libmysqlclient18-32bit as a component of SUSE OpenStack Cloud 8 mariadb as a component of SUSE OpenStack Cloud 8 mariadb-client as a component of SUSE OpenStack Cloud 8 mariadb-errormessages as a component of SUSE OpenStack Cloud 8 mariadb-galera as a component of SUSE OpenStack Cloud 8 mariadb-tools as a component of SUSE OpenStack Cloud 8 libmysqlclient18 as a component of SUSE OpenStack Cloud Crowbar 8 libmysqlclient18-32bit as a component of SUSE OpenStack Cloud Crowbar 8 mariadb as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-client as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-errormessages as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-galera as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-tools as a component of SUSE OpenStack Cloud Crowbar 8 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H). CVE-2021-2385 SUSE Liberty Linux 8:mecab-0.996-1.module+el8.0.0+3898+e09bb8de.9 SUSE Liberty Linux 8:mecab-ipadic-2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de SUSE Liberty Linux 8:mecab-ipadic-EUCJP-2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de SUSE Liberty Linux 8:mysql-8.0.26-1.module+el8.4.0+12359+b8928c02 SUSE Liberty Linux 8:mysql-common-8.0.26-1.module+el8.4.0+12359+b8928c02 SUSE Liberty Linux 8:mysql-devel-8.0.26-1.module+el8.4.0+12359+b8928c02 SUSE Liberty Linux 8:mysql-errmsg-8.0.26-1.module+el8.4.0+12359+b8928c02 SUSE Liberty Linux 8:mysql-libs-8.0.26-1.module+el8.4.0+12359+b8928c02 SUSE Liberty Linux 8:mysql-server-8.0.26-1.module+el8.4.0+12359+b8928c02 SUSE Liberty Linux 8:mysql-test-8.0.26-1.module+el8.4.0+12359+b8928c02 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools HPE Helion OpenStack 8:libmysqlclient18 HPE Helion OpenStack 8:libmysqlclient18-32bit HPE Helion OpenStack 8:mariadb HPE Helion OpenStack 8:mariadb-client HPE Helion OpenStack 8:mariadb-errormessages HPE Helion OpenStack 8:mariadb-galera HPE Helion OpenStack 8:mariadb-tools SUSE OpenStack Cloud 8:libmysqlclient18 SUSE OpenStack Cloud 8:libmysqlclient18-32bit SUSE OpenStack Cloud 8:mariadb SUSE OpenStack Cloud 8:mariadb-client SUSE OpenStack Cloud 8:mariadb-errormessages SUSE OpenStack Cloud 8:mariadb-galera SUSE OpenStack Cloud 8:mariadb-tools SUSE OpenStack Cloud Crowbar 8:libmysqlclient18 SUSE OpenStack Cloud Crowbar 8:libmysqlclient18-32bit SUSE OpenStack Cloud Crowbar 8:mariadb SUSE OpenStack Cloud Crowbar 8:mariadb-client SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages SUSE OpenStack Cloud Crowbar 8:mariadb-galera SUSE OpenStack Cloud Crowbar 8:mariadb-tools moderate 4.9 AV:N/AC:M/Au:S/C:N/I:P/A:P 5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H