CVE-2021-22570 in MySQL Server

Resumen (Inglés)

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Google Inc.

Reservar

2021-01-05

Divulgación

2022-01-26

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
198090	Oracle MySQL Server Compiling denegación de servicio	404	No está definido	Arreglo oficial	CVE-2021-22570
191685	protobuf Error Message denegación de servicio	476	No está definido	Arreglo oficial	CVE-2021-22570

Fuentes

• MITRE
• NVD
• CVE Details