{"schemaVersion":3,"id":"CVE-2021-2007","aliases":["UBUNTU-CVE-2021-2007","CGA-2mmp-8fhj-f8mv","CGA-4494-74rv-36p5","CGA-4642-w6g4-86vc","CGA-5256-28c4-f4g2","CGA-6cqv-qjrp-373f","CGA-76jx-8vh9-j52r","CGA-79mc-29xr-449q","CGA-h366-2qg7-fgjv","CGA-j7h8-r2mx-56mx","CGA-v38m-ph5f-vwc6","CGA-v8w2-qr9x-hvq5","CGA-w237-jpj8-xjq5"],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","dates":{"published":"2021-01-20T14:50:00.000Z","modified":"2024-09-26T18:43:30.998Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02308,"percentile":0.8311,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.03599999999999992,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02272},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02289,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02289,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02289,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02289,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02308,"percentile":0.8311}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02272,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02262,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02289,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02289,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02289,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02289,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02308,"percentile":0.8311}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"chainguard","product":"mysql-8.0","name":"mysql-8.0","label":"mysql-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mysql-8.0","purlType":"apk","versions":[{"text":"< 8.0.38-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.38-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mysql-8.0-client","name":"mysql-8.0-client","label":"mysql-8.0-client","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mysql-8.0-client","purlType":"apk","versions":[{"text":"< 8.0.38-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.38-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mysql-8.0-dev","name":"mysql-8.0-dev","label":"mysql-8.0-dev","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mysql-8.0-dev","purlType":"apk","versions":[{"text":"< 8.0.38-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.38-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mysql-8.0-iamguarded-compat","name":"mysql-8.0-iamguarded-compat","label":"mysql-8.0-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mysql-8.0-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.0.38-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.38-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mysql-8.0-oci-entrypoint","name":"mysql-8.0-oci-entrypoint","label":"mysql-8.0-oci-entrypoint","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mysql-8.0-oci-entrypoint","purlType":"apk","versions":[{"text":"< 8.0.38-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.38-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mysql-8.0-oci-entrypoint-compat","name":"mysql-8.0-oci-entrypoint-compat","label":"mysql-8.0-oci-entrypoint-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mysql-8.0-oci-entrypoint-compat","purlType":"apk","versions":[{"text":"< 8.0.38-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.38-r0","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mariadb-10.0","name":"mariadb-10.0","label":"mariadb-10.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mariadb-10.0","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mariadb-10.1","name":"mariadb-10.1","label":"mariadb-10.1","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mariadb-10.1","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mariadb-10.3","name":"mariadb-10.3","label":"mariadb-10.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mariadb-10.3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mysql-5.5","name":"mysql-5.5","label":"mysql-5.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mysql-5.5","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mysql-5.7","name":"mysql-5.7","label":"mysql-5.7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mysql-5.7","purlType":"deb","versions":[{"text":"< 5.7.30-0ubuntu0.16.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.7.30-0ubuntu0.18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.7.30-0ubuntu0.16.04.1 | < 5.7.30-0ubuntu0.18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mysql-8.0","name":"mysql-8.0","label":"mysql-8.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mysql-8.0","purlType":"deb","versions":[{"text":"< 8.0.20-0ubuntu0.20.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.20-0ubuntu0.20.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"percona-server-5.6","name":"percona-server-5.6","label":"percona-server-5.6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/percona-server-5.6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"percona-xtradb-cluster-5.6","name":"percona-xtradb-cluster-5.6","label":"percona-xtradb-cluster-5.6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/percona-xtradb-cluster-5.6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"32","noFixRecorded":false,"fixedIn":null},{"text":"33","noFixRecorded":false,"fixedIn":null}],"versionsText":"32 | 33","eol":{"isEol":true,"eolDate":"2021-05-25T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"32","label":"32","eolFrom":"2021-05-25T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"mariadb","product":"mariadb","name":"mariadb","label":"mariadb","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.5.0, < 5.5.65","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.1.0, < 10.1.41","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.2.0, < 10.2.26","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.3.0, < 10.3.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.4.0, < 10.4.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.5.0, < 5.5.65 | ≥ 10.1.0, < 10.1.41 | ≥ 10.2.0, < 10.2.26 | ≥ 10.3.0, < 10.3.17 | ≥ 10.4.0, < 10.4.7","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"mariadb","label":"MariaDB","category":"database"}},"hubHref":"/vendor/mariadb/mariadb"},{"vendor":"netapp","product":"active_iq_unified_manager","name":"active iq unified manager","label":"active_iq_unified_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/active_iq_unified_manager"},{"vendor":"netapp","product":"oncommand_insight","name":"oncommand insight","label":"oncommand_insight","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/oncommand_insight"},{"vendor":"netapp","product":"oncommand_workflow_automation","name":"oncommand workflow automation","label":"oncommand_workflow_automation","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/oncommand_workflow_automation"},{"vendor":"oracle corporation","product":"mysql server","name":"MySQL Server","label":"mysql server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.6.47 and prior","noFixRecorded":false,"fixedIn":null},{"text":"5.7.29 and prior","noFixRecorded":false,"fixedIn":null},{"text":"8.0.19 and prior","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.6.47 and prior | 5.7.29 and prior | 8.0.19 and prior","eol":null,"hubHref":"/vendor/oracle_corporation/mysql_server"},{"vendor":"oracle","product":"mysql","name":"mysql","label":"mysql","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.6.0, ≤ 5.6.47","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.7.0, ≤ 5.7.29","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, ≤ 8.0.19","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.6.0, ≤ 5.6.47 | ≥ 5.7.0, ≤ 5.7.29 | ≥ 8.0.0, ≤ 8.0.19","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"mysql","label":"MySQL","category":"database"}},"hubHref":"/vendor/oracle/mysql"}],"affectedCount":21,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","label":"www.oracle.com/security-alerts/cpujan2021.html","hostname":"www.oracle.com","tags":["X Refsource MISC","REPORT","Advisory","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","WEB"]},{"url":"https://security.gentoo.org/glsa/202105-27","label":"security.gentoo.org/glsa/202105-27","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Advisory","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210622-0001/","label":"security.netapp.com/advisory/ntap-20210622-0001/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Advisory","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-2007","label":"ubuntu.com/security/CVE-2021-2007","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-2007","label":"www.cve.org/CVERecord?id=CVE-2021-2007","hostname":"www.cve.org","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":["RHSA-2019:3708","RHSA-2020:1100","RHSA-2020:3518","RHSA-2020:3732","RHSA-2020:3755","RHSA-2020:3757","RHSA-2020:5246","RHSA-2020:5503","RHSA-2020:5655","RHSA-2020:5660","RHSA-2020:5662","RHSA-2020:5663"],"duplicates":[],"related":["CGA-5R4Q-XCM4-GQQF","CGA-MJ69-W4JC-R9X3"]},"timeline":[{"kind":"published","date":"2021-01-20T14:50:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-26T18:43:30.998Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T01:48:22.478Z","stale":false,"partial":false}}