AZL-50529 CVE-2024-21160 affecting package mysql for versions less than 8.0.40-1

🗓️ 16 Jul 2024 23:15:18Reported by GoogleType

osv

osv🔗 osv.dev

AZL-50529 CVE-2024-21160 affects mysql before 8.0.40-1; remote attacker can crash MySQL Server.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by vulnerabilities in Oracle MySQL	23 Oct 202421:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by vulnerabilities in Oracle MySQL	19 Jun 202505:35	–	ibm
Tenable Nessus	Azure Linux 3.0 Security Update: mysql (CVE-2024-21160)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: mysql (CVE-2024-21160)	23 Oct 202400:00	–	nessus
Tenable Nessus	Oracle MySQL Server 8.0.x < 8.0.37 (January 2025 CPU)	19 Apr 202400:00	–	nessus
Tenable Nessus	Oracle MySQL Server 8.x < 8.4.0 (July 2024 CPU)	19 Apr 202400:00	–	nessus
Tenable Nessus	Photon OS 5.0: Mysql PHSA-2024-5.0-0335	30 Jul 202400:00	–	nessus
Tenable Nessus	TencentOS Server 4: mysql (TSSA-2024:0671)	16 Jun 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-21160	5 Mar 202500:00	–	nessus
CBLMariner	CVE-2024-21160 affecting package mysql for versions less than 8.0.40-1	23 Oct 202400:47	–	cbl_mariner

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-21160

21 Apr 2026 04:30Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.14.9

EPSS0.00218

Mysql vulnerability InnoDB component Affected versions prior Denial of service Network exploit CVE 2024 21160