PT-2023-9631 · Oracle+4 · Mysql Server+3
Jie Liang
+2
·
Publicado
2023-12-07
·
Atualizado
2024-09-18
·
CVE-2024-21177
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
MySQL Server versions 8.0.37 and prior
MySQL Server versions 8.4.0 and prior
Description
The issue is related to insufficient input validation in the Server: Optimizer component of the Oracle MySQL Server system management database. This can be exploited by a remote attacker to cause a denial of service using the MySQL network protocol. The vulnerability allows an attacker with low privileges and network access to compromise the MySQL Server, resulting in the ability to cause the server to hang or crash repeatedly.
Recommendations
For MySQL Server versions 8.0.37 and prior, update to a version that contains a fix for this issue.
For MySQL Server versions 8.4.0 and prior, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to the MySQL network protocol to minimize the risk of exploitation.
Correção
DoS
Improper Resource Release
RCE
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Mysql Server
Ubuntu