CVE-2024-21125
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Summary
CVE-2024-21125 is a newly identified vulnerability affecting Oracle MySQL Server versions 8.0.37 and prior, as well as 8.4.0 and earlier. This issue, located in the FTS component, is classified as easily exploitable and allows high privileged attackers with network access to cause a denial-of-service (DoS) on the MySQL Server. Consequences of successful exploitation include server hangs or frequent crashes, leading to significant availability impacts. The Base Score, as per the CVSS v3.1 rating system, is 4.9. Attackers can leverage multiple protocols to exploit this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MySQL
Affected Vendors
- BonqDAO