CVE-2021-2007

18

FAUCET Score

CVE-2021-2007 is a difficult-to-exploit vulnerability in the C API component of Oracle MySQL Client, affecting versions 5.6.47 and prior, 5.7.29 and prior, and 8.0.19 and prior. An unauthenticated attacker with network access can achieve unauthorized read access to a subset of client-accessible data. With a CVSS 3.1 Base Score of 3.7 (Low), this vulnerability has high attack complexity and only impacts confidentiality. There is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low immediate threat.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 5.6.0, <= 5.6.47CPE matchmatch criteria	cpe:2.3:a:oracle:mysql::::::::
		>= 5.7.0, <= 5.7.29CPE matchmatch criteria	cpe:2.3:a:oracle:mysql::::::::
		>= 8.0.0, <= 8.0.19CPE matchmatch criteria	cpe:2.3:a:oracle:mysql::::::::
		32CPE matchmatch criteria	cpe:2.3:o:fedoraproject:fedora:32:::::::*
		33CPE matchmatch criteria	cpe:2.3:o:fedoraproject:fedora:33:::::::*

CVSS Data

CVSS version used by this source: 3.1

3.7LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

Exploitability Score

2.2

Impact Score

1.4

CvssVersion

3.1

Exploit Intelligence

EPSS Score

2.27%

Probability of exploitation in next 30 days

EPSS Percentile

81.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0227 is in the 77th percentile among its peer group of 1,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.3 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (22)

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUSFixed in: rh-mariadb103-mariadb-3:10.3.27-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: mariadb-1:5.5.65-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: mariadb:10.3-8010020190902091509.cdc1202b

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: mariadb-devel:10.3-8010020190902091509.cdc1202b

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: mysql:8.0-8020020200828111438.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: mariadb-connector-c-0:3.1.11-2.el8_3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.0 Update Services for SAP SolutionsFixed in: mysql:8.0-8000020200828111808.f8e95b4e

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.0 Update Services for SAP SolutionsFixed in: mariadb-connector-c-0:3.1.11-2.el8_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.0 Update Services for SAP SolutionsFixed in: mariadb:10.3-8000020201221114409.f8e95b4e

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Extended Update SupportFixed in: mysql:8.0-8010020200828111645.c27ad7f8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Extended Update SupportFixed in: mariadb-connector-c-0:3.1.11-2.el8_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: mariadb-connector-c-0:3.1.11-2.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-mysql80-mysql-0:8.0.21-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-mariadb103-galera-0:25.3.31-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-mariadb103-mariadb-3:10.3.27-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUSFixed in: rh-mysql80-mysql-0:8.0.21-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUSFixed in: rh-mariadb103-galera-0:25.3.31-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUSFixed in: rh-mariadb103-mariadb-3:10.3.27-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUSFixed in: rh-mysql80-mysql-0:8.0.21-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUSFixed in: rh-mariadb103-galera-0:25.3.31-1.el7

oraclevendor investigatingvia nvd_reference

redhatend of lifevia redhat_api

Product: Red Hat OpenStack Platform 13 (Queens)Fixed in: mariadb

Vendor Advisories (1)

redhatCVE-2021-2007Low

mysql: C API unspecified vulnerability (CPU Jan 2021)

References

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC

security.gentoo.org / glsa/202105-27

Third Party Advisory

security.netapp.com / advisory/ntap-20210622-0001

Third Party Advisory

oracle.com / security-alerts/cpujan2021.html

Vendor Advisory