Security readout for executives and security teams
Plain-English summary
CVE-2021-2417 affects Oracle MySQL Server GIS in versions 8.0.25 and earlier. A highly privileged network attacker could crash MySQL Server repeatedly and gain limited unauthorized read or data modification access. Business risk is mainly database availability, with narrower confidentiality and integrity exposure.
Executive priority
Treat as a scheduled but important database maintenance item unless high-privilege account compromise is suspected. Prioritize exposed or business-critical MySQL systems because the availability impact can be complete denial of service.
Technical view
The CVE describes an easily exploitable MySQL Server GIS vulnerability reachable over multiple network protocols with high privileges. CVSS 3.1 is 6.0: AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H. Successful exploitation may cause complete denial of service and limited unauthorized read, update, insert, or delete access.
Likely exposure
Exposure is likely limited to environments running MySQL Server 8.0.25 or earlier where highly privileged accounts can connect over the network. Internet exposure increases operational risk, but the privilege requirement substantially narrows likely attacker access.
Exploitation context
The source bundle does not report active exploitation, and KEV status is false. The vulnerability is described as easily exploitable after high-privilege network access is obtained, so insider misuse or compromised database administrator credentials are the main concern.
Researcher notes
The public description names MySQL Server GIS but does not provide root cause details, affected functions, or exploit indicators. Avoid assuming broader MySQL versions, downstream products, or active exploitation beyond the listed Oracle and NetApp references.
Mitigation direction
- Review Oracle July 2021 CPU guidance for the applicable MySQL Server fix.
- Upgrade affected MySQL Server instances beyond 8.0.25 using vendor-supported releases.
- Restrict network access to MySQL services to trusted administrative paths.
- Audit and reduce high-privilege MySQL accounts where operationally feasible.
- Check NetApp guidance if MySQL is embedded in NetApp-supported environments.
Validation and detection
- Inventory MySQL Server versions and flag 8.0.25 or earlier.
- Identify MySQL services reachable over network protocols.
- Review accounts with high privileges and recent administrative logins.
- Confirm Oracle CPU or later vendor fixes are installed.
- Check for repeated MySQL crashes or unexplained GIS-related database errors.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2021-2417 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H1.24.7Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
6MediumVector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://www.oracle.com/security-alerts/cpujul2021.htmlCVE reference · x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20210723-0001/CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.