AZL-9830
Dashboard / Vulnerabilities / AZL-9830
Summary: CVE-2021-22570 affecting package mysql for versions less than 8.0.29-1
Details: Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.
References: https://nvd.nist.gov/vuln/detail/CVE-2021-22570
Affected packages
Package
Name: mysql
Purl: pkg:rpm/azure-linux/mysql
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -8.0.29-1
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
