CVE-2023-21971

What it actually does

Vulnerability in MySQL Connector/J permits a high-privileged network attacker to trigger denial-of-service conditions (hang or repeatable crash) along with unauthorized limited data modification and read access when another user performs an action.

Why it matters to the business

Disrupts database-dependent applications across Oracle and NetApp environments, causing operational downtime and potential data integrity problems in widely deployed enterprise systems.

How an attack unfolds

A high-privileged attacker with network access crafts a malicious interaction that requires a separate user to perform an action through Connector/J protocols, resulting in service hang, data tampering, and limited reads.

How to fix it

Upgrade MySQL Connectors to a fixed release beyond 8.0.32 as soon as Oracle publishes patches for affected products; apply updates to Oracle Communications Cloud Native Core components and NetApp products in priority order.

How to confirm the fix worked

Confirm Connector/J versions exceed 8.0.32 on all systems, retest application connectivity for stability, and validate that no unauthorized data modifications occur during normal operations.

Typical attack path

1. Obtain high-privileged network access to the target environment
2. Identify MySQL Connector/J instances version 8.0.32 or earlier
3. Craft and deliver a protocol interaction that requires human action by another user
4. Trigger the flaw to induce crash or hang while performing unauthorized data operations

How to detect it

Review application and database logs for unexpected Connector/J crashes or hangs, correlate with unauthorized data changes, and inspect network traffic for unusual protocol patterns from high-privileged accounts.

What your security team should do

• Apply available patches to MySQL Connectors and dependent Oracle/NetApp products immediately given the 1277 days since disclosure
• Restrict high-privileged network accounts and enforce strong authentication controls
• Monitor EPSS trend for any further increase and review access logs for suspicious Connector/J activity