CVE-2024-21165

Summary

CVE-2024-21165 is a vulnerability affecting Oracle MySQL Server versions 8.0.37 and earlier. This issue, located in the Pluggable Auth component, is classified as easily exploitable. A high privileged attacker with network access can leverage this vulnerability to induce a hang or frequent crash of the MySQL Server, resulting in a Denial of Service (DoS) attack. The Base Score of this vulnerability is 4.9, with a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.