CVE-2024-21197

Summary

CVE-2024-21197 is a vulnerability affecting the MySQL Server product of Oracle MySQL, specifically in versions 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior. This vulnerability allows an attacker with high privileges and network access to exploit it through multiple protocols, potentially leading to a denial-of-service (DoS) condition by causing the MySQL Server to hang or crash repeatedly. The CVSS 3.1 base score for this vulnerability is 4.9, indicating medium severity with high availability impact but no integrity or confidentiality impact. To remediate this issue, it is recommended that organizations upgrade their affected MySQL Server versions to the latest supported releases as specified by Oracle's security alerts. Failure to address this vulnerability could lead to significant downtime and service disruptions within affected organizations' database operations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.