Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. External References: https://www.oracle.com/security-alerts/cpuapr2022.html#AppendixMSQL
Created community-mysql tracking bugs for this issue: Affects: fedora-all [bug 2083202] Created mariadb tracking bugs for this issue: Affects: fedora-all [bug 2083193] Created mariadb:10.3/mariadb tracking bugs for this issue: Affects: fedora-all [bug 2083194] Created mariadb:10.4/mariadb tracking bugs for this issue: Affects: fedora-all [bug 2083196] Created mariadb:10.5/mariadb tracking bugs for this issue: Affects: fedora-all [bug 2083199] Created mysql:8.0/community-mysql tracking bugs for this issue: Affects: fedora-all [bug 2083204]
MariaDB upstream states that this issue was fixed in MariaDB versions 10.5.10, 10.4.19, 10.3.29, 10.2.38. The mariadb packages as shipped in Red Hat products were previously updated to a version that contains the fix via the following errata: rh-mariadb103-mariadb in Red Hat Software Collections https://access.redhat.com/errata/RHSA-2022:1010 rh-mariadb105-mariadb in Red Hat Software Collections https://access.redhat.com/errata/RHSA-2022:1007 mariadb:10.3/mariadb module in Red Hat Enterprise Linux 8 https://access.redhat.com/errata/RHSA-2022:1556 mariadb:10.5/mariadb module in Red Hat Enterprise Linux 8 https://access.redhat.com/errata/RHSA-2022:1557
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-21451
This issue has been addressed in the following products: Red Hat Software Collections for Red Hat Enterprise Linux 7 Via RHSA-2022:6518 https://access.redhat.com/errata/RHSA-2022:6518
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2022:6590 https://access.redhat.com/errata/RHSA-2022:6590
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:7119 https://access.redhat.com/errata/RHSA-2022:7119