PT-2023-9625

CVE-2024-21185

·

Published

2023-12-07

·

Updated

2024-10-25

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.38, 8.4.1, and 9.0.0
Description The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, is related to insufficient input validation. This issue can be exploited by a remote attacker with network access via multiple protocols to compromise the MySQL Server, resulting in the ability to cause a hang or frequently repeatable crash (complete DOS) of the server.
Recommendations For versions 8.0.38, 8.4.1, and 9.0.0, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2024-11680
ALT-PU-2024-11998
ALT-PU-2024-12004
ALT-PU-2024-12462
OESA-2024-2287
USN-6934-1
Found an issue in the description? Have something to add? Feel free to write us 👾