CVE-2024-21243: Low severity ORACLE MySQL vulnerability
Oracle MySQL Server is vulnerable to a denial of service related to the Server: Telemetry component. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to cause a denial of service.
Other sources
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
— NVD
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21243?
CVE-2024-21243 is classified as a difficult to exploit vulnerability that can be potentially compromised by a high privileged attacker.
How do I fix CVE-2024-21243?
To fix CVE-2024-21243, upgrade MySQL Server to versions 8.4.3 or later and 9.0.2 or later.
Which MySQL versions are affected by CVE-2024-21243?
CVE-2024-21243 affects MySQL versions 8.4.2 and prior, as well as 9.0.1 and prior.
What type of access is required to exploit CVE-2024-21243?
Exploitation of CVE-2024-21243 requires high privileged access via multiple network protocols.
Is CVE-2024-21243 a critical vulnerability?
While CVE-2024-21243 is difficult to exploit, its potential impact warrants immediate attention and fixing.