CVE-2024-21090

What it actually does

The vulnerability allows an unauthenticated remote attacker to trigger a hang or repeatable crash in MySQL Connector/Python via crafted network traffic over supported protocols, resulting in complete denial of service for the connector.

Why it matters to the business

Applications using the affected connector may suffer unplanned outages or degraded database connectivity, leading to operational disruption; the stable low EPSS and lack of KEV listing suggest limited active exploitation but still require prompt attention due to the high availability impact.

How an attack unfolds

An attacker with network access to an affected MySQL Connector/Python instance sends specially crafted data across multiple protocols to induce the crash condition without requiring authentication or user interaction.

How to fix it

Upgrade MySQL Connector/Python from version 8.3.0 or earlier to the latest patched release that resolves this issue.

How to confirm the fix worked

Confirm the installed Connector/Python version is newer than 8.3.0 and perform connectivity tests to verify the connector remains stable under expected network loads.

Typical attack path

1. Scan for publicly reachable instances of MySQL Connector/Python
2. Craft and transmit malicious protocol messages targeting the vulnerable component
3. Observe connector hang or crash leading to denial of service

How to detect it

Review application and connector logs for repeated connection failures, unexpected process terminations, or hangs; correlate with network traffic patterns indicating repeated malformed requests.

What your security team should do

• Apply the available patch or upgrade Connector/Python immediately to versions beyond 8.3.0
• Restrict network exposure of database connectors to trusted sources only
• Monitor for connector process instability and review application error logs