CVE-2022-21323 (CNNVD-202201-1465)
中文标题:
Oracle MySQL 缓冲区错误漏洞
英文标题:
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported ...
漏洞描述
中文描述:
Oracle MySQL Cluster是美国甲骨文（Oracle）公司的 MySQL 的适合于分布式计算环境的高实用、高冗余版本。 Oracle MySQL Cluster 存在缓冲区错误漏洞，该漏洞源于MySQL Cluster的通用组件存在不适当的输入验证。有远程特权的用户可以利用此漏洞读取内存内容或使应用程序崩溃。
英文描述:
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Oracle Corporation | MySQL Cluster | 7.5.24 and prior | - | - |
cpe:2.3:a:oracle_corporation:mysql_cluster:7.5.24_and_prior:*:*:*:*:*:*:*
|
| Oracle Corporation | MySQL Cluster | 7.6.20 and prior | - | - |
cpe:2.3:a:oracle_corporation:mysql_cluster:7.6.20_and_prior:*:*:*:*:*:*:*
|
| Oracle Corporation | MySQL Cluster | 8.0.27 and prior | - | - |
cpe:2.3:a:oracle_corporation:mysql_cluster:8.0.27_and_prior:*:*:*:*:*:*:*
|
| oracle | mysql | * | - | - |
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
|
| netapp | oncommand_insight | - | - | - |
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
|
| netapp | oncommand_workflow_automation | - | - | - |
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (cna)
LOWCVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2022-21323 |
2025-11-11 15:21:16 | 2025-11-11 07:37:16 |
| NVD | nvd_CVE-2022-21323 |
2025-11-11 14:58:13 | 2025-11-11 07:45:33 |
| CNNVD | cnnvd_CNNVD-202201-1465 |
2025-11-11 15:10:48 | 2025-11-11 07:57:05 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 缓冲区错误
- cnnvd_id: 未提取 -> CNNVD-202201-1465
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 3 -> 6
- data_sources: ['cve'] -> ['cve', 'nvd']