CVE-2024-20983

Summary

CVE-2024-20983 is a vulnerability in the MySQL Server product of Oracle MySQL, affecting versions 8.0.34 and earlier. This vulnerability can be easily exploited by a high privileged attacker with network access through multiple protocols, potentially compromising the MySQL Server. Successful exploitation of this vulnerability can lead to unauthorized ability to cause a hang or frequently repeatable crash (complete denial of service) of the MySQL Server. The CVSS 3.1 Base Score for this vulnerability is 4.9, indicating medium severity with availability impacts. Affected products include Z3R9gD, tkNmD-, Z2nole, r6Wi6e, r6Wi6f, lYKMY2, kTfW5V, mYigth, YLUeA1, YLUeA0, YLUeAz, YLUeAy, YLUeAx, YLUeAw, ejS_sg, dfvGVU, r6Wi6g, r6Wi6h, r6Wi6i, f2uUhN, aNDT-_, g-ANf8, g-ANf9, aNDT--, g-ANf-, aNDT-9,g-ANf_, aNDT-8,YLUeAv,YLUeAu,YLUeAt. It is important for organizations using Oracle MySQL Server to apply appropriate patches and updates to remediate this vulnerability and prevent potential unauthorized access or denial of service attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.