CVE-2021-2308

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.23 and prior

Description The issue is related to insufficient input validation in the Server: Information Schema component of Oracle MySQL Server. This can be exploited by a remote attacker to gain unauthorized access to protected information via the MySQL network protocol. Successful attacks can result in unauthorized read access to a subset of MySQL Server accessible data. The vulnerability can also cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Recommendations For versions 8.0.23 and prior, update to a version that includes the fix for this issue to prevent unauthorized access and potential crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.