CVE-2021-2385

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jul 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-238507.2A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which couCVE-2021-238517.2A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which coulCVE-2021-238524.9An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to becCVE-2021-238539.8In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.CVE-2021-238546.1An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interfaCVE-2021-238557.5The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and theCVE-2021-238566.1The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending tCVE-2021-238579.8Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the passworCVE-2021-238587.5Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resourceCVE-2021-238597.5An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS withCVE-2021-23864.3Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccCVE-2021-238606.1An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnera