CVE-2024-21166

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Jul 16, 2024
Updated: Aug 1, 2024
CWE ID 285

Summary

CVE-2024-21166 is a vulnerability affecting Oracle MySQL's InnoDB component. Affected versions include 8.0.36 and prior, as well as 8.3.0 and prior. This issue allows high-privileged attackers with network access to compromise the MySQL Server via multiple protocols. Successful exploitation can result in unauthorized data modification, including critical data, or a complete denial-of-service through server crashes. The base score on the Common Vulnerability Scoring System is 5.9, with both integrity and availability impacts.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Oracle MySQL Server
  • MySQL
  • MySQL Server

Affected Vendors

  • BonqDAO
  • MySQL AB