CVE-2024-21197

What it actually does

The flaw in the Information Schema component permits a high-privileged network attacker to trigger a hang or repeatable crash resulting in complete denial of service against the MySQL Server.

Why it matters to the business

Database services become unavailable leading to operational downtime for applications relying on affected MySQL versions; low EPSS and no KEV status indicate limited immediate widespread risk but high-privilege access still poses availability threats.

How an attack unfolds

An attacker with high network privileges connects to the MySQL Server using supported protocols and invokes the vulnerable Information Schema functionality to induce a hang or crash; no named threat actors or ransomware use reported.

How to fix it

Upgrade affected MySQL installations to versions beyond 8.0.39, 8.4.2 or 9.0.1 as appropriate; for Armeria Maven packages apply the fix in version 0.97.0.

How to confirm the fix worked

Confirm MySQL Server version is updated past the listed affected releases and test that Information Schema queries no longer produce denial-of-service conditions under high-privileged network access.

Typical attack path

1. Obtain high-privileged network access to the MySQL Server
2. Connect via multiple protocols to the Information Schema component
3. Trigger the flaw to cause server hang or crash

How to detect it

Inspect database logs and network connection records for repeated or anomalous Information Schema queries originating from high-privileged accounts that coincide with server hangs or restarts.

What your security team should do

• Prioritize patching MySQL Server instances to fixed releases
• Review and restrict high-privileged network accounts
• Monitor for unusual Information Schema query patterns from privileged users