CVE-2024-21165: Medium severity Oracle MySQL vulnerability
Last updated 31 July 2024
Other sources
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
— Debian
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21165?
CVE-2024-21165 is a high severity vulnerability that allows a privileged attacker with network access to compromise the MySQL Server.
How do I fix CVE-2024-21165?
To address CVE-2024-21165, upgrade to MySQL version 8.0.39 or later.
Which versions are affected by CVE-2024-21165?
CVE-2024-21165 affects MySQL Server versions 8.0.37 and prior.
Who is affected by CVE-2024-21165?
Primarily, organizations using affected versions of MySQL Server are at risk if they allow network access.
What component of MySQL does CVE-2024-21165 impact?
CVE-2024-21165 impacts the Server: Pluggable Auth component of Oracle MySQL.