CVE-2024-20976

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Feb 17, 2024
Updated: Mar 1, 2024

Summary

CVE-2024-20976 is a vulnerability affecting Oracle MySQL's Server: Optimizer component in versions 8.0.35 and prior, as well as 8.2.0 and prior. This issue is easily exploitable by high privileged attackers with network access, allowing them to cause a hang or frequently repeatable crash (complete Denial of Service) of MySQL Server. The base score of this vulnerability is 4.9 (Availability impacts), with a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • MySQL
  • Oracle MySQL Server

Affected Vendors

  • BonqDAO