CVE-2024-20964

Summary

CVE-2024-20964 is a newly disclosed vulnerability affecting Oracle MySQL Server versions 8.0.35 and prior, as well as 8.2.0 and prior. This issue lies within the Security: Privileges component, and a low-privileged attacker with network access can exploit it via multiple protocols. Successful attacks could lead to a denial of service (DoS) by causing the MySQL Server to hang or frequently crash. The CVSS Base Score is 5.3, indicating a medium impact on availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.