F5-K000140908
First published: Tue Sep 03 2024(Updated: )
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 BIG-IP and BIG-IQ Centralized Management | >=17.1.0<=17.1.1 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=16.1.0<=16.1.5 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=15.1.0<=15.1.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of F5-K000140908?
The severity of F5-K000140908 is classified as easily exploitable, impacting low privileged attackers with network access.
Which versions of MySQL Server are affected by F5-K000140908?
F5-K000140908 affects MySQL Server versions 8.0.37 and prior, as well as 8.4.0 and prior.
How do I fix F5-K000140908?
Fixing F5-K000140908 involves upgrading your MySQL Server to the latest supported version that addresses the vulnerability.
Can F5 BIG-IP products be impacted by F5-K000140908?
Yes, F5 BIG-IP products are impacted if they are running versions 17.1.1 and prior, 16.1.5 and prior, or 15.1.10 and prior.
What type of access is required to exploit F5-K000140908?
F5-K000140908 can be exploited by a low privileged attacker that has network access through multiple protocols.
- agent/severity
- agent/last-modified-date
- agent/references
- agent/description
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/f5-advisory
- source/F5
- alias/CVE-2024-21134
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/f5
- canonical/f5 big-ip and big-iq centralized management
- version/f5 big-ip and big-iq centralized management/17.1.0
- version/f5 big-ip and big-iq centralized management/17.1.1
- version/f5 big-ip and big-iq centralized management/16.1.0
- version/f5 big-ip and big-iq centralized management/16.1.5
- version/f5 big-ip and big-iq centralized management/15.1.0
- version/f5 big-ip and big-iq centralized management/15.1.10