PT-2023-9625 · Oracle+4 · Mysql Server+3

CVE-2024-21185

·

Publicado

2023-12-07

·

Atualizado

2024-10-25

CVSS v2.0

6.8

Média

VetorAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.38, 8.4.1, and 9.0.0
Description The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, is related to insufficient input validation. This issue can be exploited by a remote attacker with network access via multiple protocols to compromise the MySQL Server, resulting in the ability to cause a hang or frequently repeatable crash (complete DOS) of the server.
Recommendations For versions 8.0.38, 8.4.1, and 9.0.0, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Improper Resource Release

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2024-11680
ALT-PU-2024-11998
ALT-PU-2024-12004
ALT-PU-2024-12462
BDU:2024-08903
CVE-2024-21185
OESA-2024-2287
USN-6934-1

Produtos afetados

Alt Linux
Linuxmint
Mysql Server
Ubuntu