Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

🗓️ 04 Sep 2025 10:09:45Reported by MicrosoftType

Oracle MySQL Server thread pooling vulnerability lets a low privileged remote attacker crash server.

Reporter	Title	Published	Views	Family All 28
Chainguard	CVE-2024-21176 vulnerabilities	16 Jul 202423:15	–	cgr
CNNVD	Oracle MySQL 安全漏洞	16 Jul 202400:00	–	cnnvd
CNVD	Unspecified Vulnerability in Oracle MySQL Server (CNVD-2024-34922)	17 Jul 202400:00	–	cnvd
CVE	CVE-2024-21176	16 Jul 202422:40	–	cve
Cvelist	CVE-2024-21176	16 Jul 202422:40	–	cvelist
Debian CVE	CVE-2024-21176	16 Jul 202422:40	–	debiancve
EUVD	EUVD-2024-18890	3 Oct 202520:07	–	euvd
F5 Networks	K000140433: MySQL vulnerability CVE-2024-21176	25 Jul 202418:20	–	f5
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by vulnerabilities in Oracle MySQL	19 Jun 202505:35	–	ibm
Tenable Nessus	Oracle MySQL Server 8.x < 8.4.1 (January 2025 CPU)	18 Jul 202400:00	–	nessus