Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.40 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
References
| Link | Resource |
|---|---|
| https://security.netapp.com/advisory/ntap-20230427-0007/ | |
| https://www.oracle.com/security-alerts/cpuapr2023.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
27 Apr 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
19 Apr 2023, 14:30
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle
Oracle mysql Server |
|
| CPE | cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* | |
| References | (MISC) https://www.oracle.com/security-alerts/cpuapr2023.html - Vendor Advisory | |
| CWE | NVD-CWE-noinfo |
18 Apr 2023, 20:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-18 20:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-21963
Mitre link : CVE-2023-21963
CVE.ORG link : CVE-2023-21963
JSON object : View
Products Affected
oracle
- mysql_server
CWE