CVE-2024-21196
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Oct 15, 2024
Updated: Mar 13, 2025
CWE ID 400
Summary
CVE-2024-21196 is a newly disclosed vulnerability affecting Oracle MySQL Server versions 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior. This issue, located within the X Plugin component, is classified as easily exploitable, allowing a low privileged network attacker to cause a denial-of-service (DoS) condition on the MySQL Server. Consequences include server hangs or frequent crashes, impacting availability significantly with a base CVSS score of 6.5.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MySQL