CVE-2024-21231

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L).

Low-impact vulnerability in Red Hat Enterprise Linux and Fedora's MySQL packages: a difficult-to-exploit issue in the MySQL Client programs component can allow a low-privileged attacker with network access via multiple protocols to cause a partial denial of service of MySQL Server. The CVSS 3.1 score is 3.1 (LOW), consistent with the required network access, high attack complexity, and limited availability impact. The current affects mark Red Hat Enterprise Linux 8, 9, and 10 MySQL packages and the Fedora community mysql8.0 package as affected; no not-affected product distinction is recorded. Resolution is delegated, and a fix is being pursued.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.