CVE-2024-21060

Summary

CVE-2024-21060 is a newly disclosed vulnerability affecting Oracle MySQL Server versions 8.0.36 and prior, as well as 8.3.0 and prior. This issue resides in the Data Dictionary component and allows a high privileged attacker to cause a denial-of-service (DoS) by exploiting the vulnerability through multiple network access protocols. A successful attack can lead to MySQL Server crashing repeatedly or becoming unresponsive, causing significant availability impacts (CVSS Base Score 4.9). Attackers can take advantage of this vulnerability without user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.