CVE-2024-21102

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Apr 16, 2024
Updated: Apr 26, 2024

Summary

CVE-2024-21102 is a serious vulnerability affecting Oracle MySQL Server versions 8.0.36 and prior, as well as 8.3.0 and prior. This issue lies within the Thread Pooling component and is easily exploited by high-privileged attackers with network access. The successful exploitation of this vulnerability can lead to a denial-of-service (DoS) attack on the MySQL Server, resulting in a hang or frequent crash. The Base Score for this vulnerability, according to the Common Vulnerability Scoring System (CVSS), is 4.9, with a high privilege requirement (PR:H) and network attack vector (AV:N).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • MySQL Server
  • MySQL
  • Oracle MySQL Server

Affected Vendors

  • BonqDAO
  • MySQL AB

Advisories, Assessments, and Mitigations

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2024-21102 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions

Book your demo

Sign in

Back to Vulnerability Database