N/A

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L

N/A

Oracle MySQL 缓冲区错误漏洞

Oracle MySQL Cluster是美国甲骨文（Oracle）公司的 MySQL 的适合于分布式计算环境的高实用、高冗余版本。 Oracle MySQL Cluster 存在缓冲区错误漏洞，该漏洞是由于 Cluster: General 组件在 MySQL Cluster 中不正确的输入验证而存在的。远程特权用户可以利用此漏洞读取内存内容或使应用程序崩溃。该漏洞允许远程特权用户读取内存内容或使应用程序崩溃。

N/A

N/A