CVE-2025-21522
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 770
Summary
CVE-2025-21522 is a vulnerability affecting Oracle MySQL Server versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This easily exploitable issue lies in the product's Parser component. A low-privileged attacker with network access can exploit this vulnerability via multiple protocols, leading to a hang or frequent crash of MySQL Server, resulting in a Denial of Service (DoS) attack. The CVSS Base Score is 6.5, with a high impact on availability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MySQL