CVE-2024-20972

Summary

CVE-2024-20972 is a newly identified vulnerability affecting Oracle MySQL Server versions 8.0.35 and prior, as well as 8.2.0 and prior. This high-severity issue (CVSS Base Score: 4.9) enables a high-privileged attacker with network access to compromise the server via multiple protocols. Successful exploitation may result in a hang or frequently repeatable crash (Denial of Service) of the MySQL Server. This vulnerability is considered easily exploitable and poses significant availability risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.