PT-2023-9625
CVE-2024-21185
·
Published
2023-12-07
·
Updated
2024-10-25
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
MySQL Server versions 8.0.38, 8.4.1, and 9.0.0
Description
The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, is related to insufficient input validation. This issue can be exploited by a remote attacker with network access via multiple protocols to compromise the MySQL Server, resulting in the ability to cause a hang or frequently repeatable crash (complete DOS) of the server.
Recommendations
For versions 8.0.38, 8.4.1, and 9.0.0, update to a newer version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾