PT-2023-9625 · Oracle+4 · Mysql Server+3
CVE-2024-21185
·
Published
2023-12-07
·
Updated
2024-10-25
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
MySQL Server versions 8.0.38, 8.4.1, and 9.0.0
Description
The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, is related to insufficient input validation. This issue can be exploited by a remote attacker with network access via multiple protocols to compromise the MySQL Server, resulting in the ability to cause a hang or frequently repeatable crash (complete DOS) of the server.
Recommendations
For versions 8.0.38, 8.4.1, and 9.0.0, update to a newer version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Resource Exhaustion
Improper Resource Release
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Mysql Server
Ubuntu