CVE-2025-21534

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 770

Summary

CVE-2025-21534 is a newly disclosed vulnerability affecting Oracle MySQL's Performance Schema component in versions 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior. This easily exploitable issue enables high privileged attackers, with network access via multiple protocols, to cause a denial-of-service (DoS) on MySQL Server. Consequences of successful exploitation include frequent crashes or a complete hang of the MySQL Server. The CVSS Base Score is 4.9, indicating a high risk of availability impact.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share