PT-2024-18820 · Oracle+8 · Mysql Server+7

Jie Liang + 2 · Published 2024-01-16 · Updated 2025-03-29 · CVE-2024-20972

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.35 and prior MySQL Server versions 8.2.0 and prior

Description The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.

Recommendations For MySQL Server versions 8.0.35 and prior, update to a version later than 8.0.35. For MySQL Server versions 8.2.0 and prior, update to a version later than 8.2.0. As a temporary workaround, consider restricting network access to the MySQL Server to minimize the risk of exploitation.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2024:0894

ALSA-2024:1141

ALT-PU-2024-1252

ALT-PU-2024-1385

ALT-PU-2024-2258

ALT-PU-2024-4030

CESA-2024_0894

CVE-2024-20972

INFSA-2024_1141

OESA-2024-1558

OESA-2024-1559

OESA-2024-1560

OESA-2024-1561

OESA-2024-1744

OESA-2024-2071

RHSA-2024:0894

RHSA-2024:1141

RHSA-2024:2619

RHSA-2024_0894

RHSA-2024_1141

USN-6615-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Mysql Server

Red Hat

Rocky Linux

Ubuntu

References · 422

• https://nvd.nist.gov/vuln/detail/CVE-2023-21881 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-21946 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21454 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-22026 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21459 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-21867 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21127 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20967 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21137 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-22058 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21526 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21525 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20966 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21527 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-22112 · Security Note