CVE-2024-21262: Medium severity IBM Guardium Data Protection vulnerability
Oracle MySQL Connectors are vulnerable to a denial of service related to the Connector/ODBC components. By sending a specially crafted request, a remote attacker could exploit this vulnerability to perform unauthorized update, insert or delete access, leading to a denial of service.
Other sources
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21262?
CVE-2024-21262 is considered an easily exploitable vulnerability that allows unauthenticated attacks on MySQL Connectors.
How do I fix CVE-2024-21262?
To patch CVE-2024-21262, upgrade MySQL Connectors to version 9.0.1 or later.
Who is affected by CVE-2024-21262?
CVE-2024-21262 affects all users of MySQL Connectors version 9.0.0 and earlier.
Can CVE-2024-21262 be exploited remotely?
Yes, CVE-2024-21262 can be exploited remotely by an unauthenticated attacker with network access.
What components are affected by CVE-2024-21262?
CVE-2024-21262 specifically affects the MySQL Connectors, particularly the Connector/ODBC component.