CVE-2021-2012

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/
• https://security.gentoo.org/glsa/202105-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210219-0003/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/
• https://security.gentoo.org/glsa/202105-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210219-0003/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20114When installed following the default/recommended settings, T…7.5
• CVE-2021-20115A reflected cross-site scripting vulnerability exists in TCE…6.1
• CVE-2021-20116A reflected cross-site scripting vulnerability exists in TCE…6.1
• CVE-2021-20117Nessus Agent 8.3.0 and earlier was found to contain a local …6.7
• CVE-2021-20118Nessus Agent 8.3.0 and earlier was found to contain a local …6.7
• CVE-2021-20119The password change utility for the Arris SurfBoard SB8200 c…7.1
• CVE-2021-20120The administration web interface for the Arris Surfboard SB8…8.8
• CVE-2021-20121The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version …4
• CVE-2021-20122The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version …7.2
• CVE-2021-20123A local file inclusion vulnerability exists in Draytek Vigor…7.5
• CVE-2021-20124A local file inclusion vulnerability exists in Draytek Vigor…7.5
• CVE-2021-20125An arbitrary file upload and directory traversal vulnerabili…9.8