Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Windows). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. External References: http://www.oracle.com/security-alerts/cpuoct2021.html#AppendixMSQL
Created community-mysql tracking bugs for this issue: Affects: fedora-all [bug 2016141] Created mysql:8.0/community-mysql tracking bugs for this issue: Affects: fedora-all [bug 2016142]
The affected component as listed in the upstream advisory - Server: Windows - indicates that this issue affected MySQL versions for Windows platform, and hence would not affect Linux versions of MySQL.
Even though this issue was only listed in the Oracle Critical Patch Update Advisory - October 2021, it's listed as fixed in version 8.0.26, which was released in July 2021. The MySQL packages as shipped in Red Hat Enterprise Linux 8 and Red Hat Software Collections were already updated to that version via the following errata: https://access.redhat.com/errata/RHSA-2020:3757 https://access.redhat.com/errata/RHSA-2021:3811
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2021-35583