CVE-2024-20964
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Feb 17, 2024
Updated: Feb 20, 2024
Summary
CVE-2024-20964 is a newly disclosed vulnerability affecting Oracle MySQL Server versions 8.0.35 and prior, as well as 8.2.0 and prior. This issue lies within the Security: Privileges component, and a low-privileged attacker with network access can exploit it via multiple protocols. Successful attacks could lead to a denial of service (DoS) by causing the MySQL Server to hang or frequently crash. The CVSS Base Score is 5.3, indicating a medium impact on availability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.