Skip to main content

CVE-2024-21009

Medium
4.9/10

Summary

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). An easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or a frequently repeatable crash (complete DOS) of MySQL Server. This issue affects mysql-server versions through 8.0.36, and 8.1.0 through 8.3.0.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • HIGH
  • NONE
  • HIGH

References

Advisory Timeline

  • Published