PT-2023-9625 · Oracle+4 · Mysql Server+3

Published 2023-12-07 · Updated 2024-10-25 · CVE-2024-21185

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.38, 8.4.1, and 9.0.0

Description The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, is related to insufficient input validation. This issue can be exploited by a remote attacker with network access via multiple protocols to compromise the MySQL Server, resulting in the ability to cause a hang or frequently repeatable crash (complete DOS) of the server.

Recommendations For versions 8.0.38, 8.4.1, and 9.0.0, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Resource Release

RCE

Resource Exhaustion

Weakness Enumeration

CWE-404

CWE-20

CWE-400

Related Identifiers

ALT-PU-2024-11680

ALT-PU-2024-11998

ALT-PU-2024-12004

ALT-PU-2024-12462

BDU:2024-08903

CVE-2024-21185

OESA-2024-2287

USN-6934-1

Affected Products

Alt Linux

Linuxmint

Mysql Server

Ubuntu

References · 149

• https://ubuntu.com/security/CVE-2024-21127 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03736 · Security Note
• https://bdu.fstec.ru/vul/2024-08904 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21162 · Security Note
• https://ubuntu.com/security/CVE-2024-21177 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21051 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21008 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21239 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21203 · Security Note
• https://ubuntu.com/security/notices/USN-6934-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04074 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21247 · Security Note
• https://bdu.fstec.ru/vul/2024-08853 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21236 · Security Note
• https://bdu.fstec.ru/vul/2024-08902 · Security Note