CVE-2024-20973

Summary

CVE-2024-20973 is a newly identified vulnerability affecting the Optimizer component of Oracle MySQL Server. Versions 8.0.35 and prior, as well as 8.2.0 and prior, are susceptible to this easily exploitable issue. A low privileged attacker with network access can take advantage of this vulnerability, leading to a denial of service (DoS) attack. Successful exploitation may result in a hang or frequent crashes of the MySQL Server. The CVSS Base Score is 6.5, indicating a medium level of severity with potential impact on server availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.