PatchaPalooza

CVE-2021-35577:

CVE-2021-35577 is a vulnerability, with a CVSS 3.1 base score of 4.9 (Medium). An attacker can exploit it remotely over the network, with high privileges and without user interaction. Microsoft has not reported exploitation in the wild. The EPSS model estimates a 2.50% probability of exploitation activity in the next 30 days, higher than 85% of all scored vulnerabilities. Microsoft released the fix on 15 December 2021 in the December 2021 Patch Tuesday. It affects 2 products in 1 product family (Mariner).

Key facts

CVE ID
CVE-2021-35577
Severity
Medium CVSS 4.9
Exploited in the wild
No
Publicly disclosed
No
EPSS
2.50% (percentile 85%)
CISA KEV
Not listed
Released
Last updated
Patch Tuesday
December 2021 Patch Tuesday
Product families
Mariner

CVSS score and vector

Microsoft scores CVE-2021-35577 at 4.9 (temporal 4.9) using CVSS 3.1. Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

MetricValue
Attack vectorNetwork
Attack complexityLow
Privileges requiredHigh
User interactionNone
ScopeUnchanged
Confidentiality impactNone
Integrity impactNone
Availability impactHigh

Affected products (2)

Mariner

ProductSecurity updateTypeFixed buildRestart
CBL Mariner 2.0 x64mysqlCBL-Mariner8.0.28-1
CBL Mariner 2.0 ARMmysqlCBL-Mariner8.0.28-1

NIST NVD data

NVD status
Modified
NVD CVSS
4.9 (MEDIUM)
Published to NVD
NVD last modified

Affected configurations (CPE)

ProductVulnerable versions
oncommand insightall listed versions
snapcenterall listed versions
mysqlfrom 8.0.0, up to and including 8.0.26
fedora 33all listed versions
fedora 34all listed versions
fedora 35all listed versions

References

Revision history

VersionDateDescription
1.0Information published.

Sources