Information about disclosure of this vulnerability was announced by the vendor in September 2017. There are no known exploits in the wild, but the vulnerability is still being researched. Vulnerable versions The vendor released the following versions that are affected: MySQL 5.5
MySQL 5.6
MySQL 5.7
MySQL 5.8
MySQL 5.9
MySQL 5.10
MySQL 5.11
MySQL 5.12
MySQL 5.13
MySQL 5.14
MySQL 5.15
MySQL 5.16
MySQL 5.17
There is no fixed release date for MySQL 8.0 at the moment. However, the vendor announced that MySQL 8.0 will be released in the second half of 2018. Solution update The solution for this problem will be released on a fixed release schedule. At the moment, there are no available updates for MySQL 5.5 and earlier versions. However, it is recommended to upgrade to the latest version of MySQL as soon as possible.
Summary
The vendor released the following versions that are affected: MySQL 5.5
MySQL 5.6
MySQL 5.7
MySQL 5.8
MySQL 5.9
MySQL 5.10
MySQL 5.11
MySQL 5.12
MySQL 5.13
MySQL 5.14
MySQL 5.15
MySQL 5.16
MySql 5 17
Summary of vulnerability
Information about disclosure of this vulnerability was announced by the vendor in September 2017. There are no known exploits in the wild, but the vulnerability is still being researched. Vulnerable versions The vendor released the following versions that are affected: MySQL 5.5
MySQL 5.6
MySQL 5.7
MySQL 5.8
MySQL 5.9
MySQL 5.10
MySQL 5.11
MySQL 5.12
MySQL 5.13
MySQL 5.14
MySQL 5.15 MySql5.16
MySql5.17 There is no fixed release date for MySQL 8 at the moment, but the vendor announced that MySQL 8 will be released in second half of 2018
MySQL 5.6
, 5.7, and 5.8
The vendor released a patch for MySQL 5.5, MySQL 5.6, and MySQL 5.7 on September 12th, 2017 that prevents this vulnerability from being exploited by default. If you have upgraded to these versions of MySQL, you are no longer affected by this vulnerability. For instructions on updating your version of MySQL to the latest release follow the vendor's official blog post: https://devblog.mysql.com/news/update-to-protect-against-vulnerability-CVE-2022-21483/
Timeline
Published on: 04/19/2022 21:15:00 UTC
Last modified on: 05/02/2022 16:51:00 UTC