CVE-2021-2411: 
MySQL Cluster vulnerability analysis and mitigation

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: JS module) affecting versions 8.0.25 and prior. This is a difficult to exploit vulnerability that allows unauthenticated attackers with network access via multiple protocols to compromise MySQL Cluster (Oracle CPE).

The vulnerability has been assigned a CVSS 3.1 Base Score of 3.7 (LOW) with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L. The attack vector is network-based, requires high attack complexity, needs no privileges, and requires no user interaction. The scope is unchanged, with no impact on confidentiality or integrity, but low impact on availability (NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. The impact is limited to availability with no effect on confidentiality or integrity of the system (Oracle CPE).

Oracle has released patches to address this vulnerability in MySQL Cluster. Users should upgrade to versions newer than 8.0.25. For systems that cannot be immediately upgraded, network access controls should be implemented to restrict unauthorized access (Oracle CPE).