CVE-2021-2410

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jul 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-241005.0Microsoft Edge for Android Information Disclosure VulnerabilityCVE-2021-241016.5Microsoft Dataverse Information Disclosure VulnerabilityCVE-2021-241027.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-241037.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-241044.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-241058.4<p>Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manageCVE-2021-241065.5Windows DirectX Information Disclosure VulnerabilityCVE-2021-241075.5Windows Event Tracing Information Disclosure VulnerabilityCVE-2021-241087.8Microsoft Office Remote Code Execution VulnerabilityCVE-2021-241096.8Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCVE-2021-24113.7Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: JS module). Supported versions that are affected are 8.0.25 CVE-2021-241107.8HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-2410: Medium severity, CVSS 4.9 | Vulnix