CVE-2022-21290

Name of the Vulnerable Software and Affected Versions MySQL Cluster versions 8.0.27 and prior

Description The issue is related to a heap-based buffer overflow in the MySQL Cluster component, which can be exploited to execute arbitrary code. This can allow a remote attacker to compromise the MySQL Cluster, potentially leading to a takeover. The exploitation requires high privileges and access to the physical communication segment attached to the hardware where the MySQL Cluster executes, as well as human interaction from a person other than the attacker.

Recommendations For versions 8.0.27 and prior, update to a version that contains a fix for this issue to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.