CVE-2024-21232

A flaw was found in Oracle MySQL Server component services. A high-privileged attacker on the network can cause a partial denial of service. Oracle rates it as difficult to exploit.

This low impact vulnerability in the Oracle MySQL Server "Server: Components Services" component affects the mysql8.4 component shipped in Red Hat Enterprise Linux 10. The flaw is difficult to exploit and allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, with successful attacks resulting in an unauthorized partial denial of service (partial DoS) of MySQL Server. Red Hat rates this flaw Low severity with a CVSS 3.1 base score of 2.2 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L), matching the upstream Oracle severity, so there is no difference from the upstream assessment. The affected upstream versions are MySQL 8.4.2 and prior in the 8.4 series and 9.0.1 and prior in the 9.0 series; a fix for the affected mysql8.4 component in Red Hat Enterprise Linux 10 is being pursued under a delegated resolution. The mysql components in Red Hat Enterprise Linux 8 and Red Hat Enterprise Linux 9, which ship MySQL 8.0, and the mysql8.0 package in Fedora are not affected because MySQL 8.0 is outside the affected 8.4 and 9.0 version ranges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.