CVE-2024-21134: Medium severity f5 big-ip and big-iq centralized management vulnerability
Last updated 31 July 2024
Other sources
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21134?
CVE-2024-21134 is classified as an easily exploitable vulnerability allowing low privileged attackers network access.
How do I fix CVE-2024-21134?
To mitigate CVE-2024-21134, upgrade your MySQL Server to version 8.0.39-1 or later.
Which versions of MySQL are affected by CVE-2024-21134?
CVE-2024-21134 affects MySQL Server versions 8.0.37 and prior, as well as 8.4.0 and prior.
Does CVE-2024-21134 affect F5 BIG-IP products?
Yes, CVE-2024-21134 impacts specific versions of F5 BIG-IP, including versions 15.1.0 to 15.1.10, 16.1.0 to 16.1.5, and 17.1.0 to 17.1.1.
What type of vulnerability is CVE-2024-21134?
CVE-2024-21134 is primarily a connection handling vulnerability within Oracle MySQL Server.