CVE-2024-20960

What it actually does

The flaw in the Server: RAPID component permits a low-privileged network attacker to trigger a hang or repeatable crash, resulting in complete denial of service for the MySQL Server process.

Why it matters to the business

Database services become unavailable, causing application downtime, interrupted transactions, and potential loss of revenue or operational continuity until the server is restarted.

How an attack unfolds

An attacker obtains low-privileged network credentials, connects to the MySQL Server over supported protocols, and sends specially crafted requests targeting the RAPID component that force the server into a hung or crashed state.

How to fix it

Upgrade affected MySQL Server installations (8.0.35 and earlier, 8.2.0 and earlier) to the latest vendor-supplied versions that resolve the issue in the RAPID component; apply updates promptly given the public disclosure date and stable exploit maturity.

How to confirm the fix worked

Verify the installed MySQL version is newer than the affected releases, review release notes for the RAPID component fix, and confirm that low-privileged network connections no longer produce crashes under expected load.

Typical attack path

1. Obtain low-privileged network credentials for the MySQL instance
2. Establish a connection using one of the supported protocols
3. Transmit crafted requests that exercise the vulnerable RAPID code path
4. Induce repeated server hangs or crashes to sustain denial of service

How to detect it

Review MySQL error logs and crash reports for abrupt terminations or hang indicators following low-privileged connections; correlate with authentication logs showing repeated access from untrusted sources.

What your security team should do

• Apply vendor patches to all MySQL 8.0 and 8.2 installations without delay
• Restrict network access to the database to only trusted clients and enforce least-privilege accounts
• Enable and monitor MySQL error and crash logs for repeated hangs or abrupt terminations
• Test patched instances in a staging environment before production rollout