CVE-2024-21162

What it actually does

Allows a high-privileged network attacker to trigger a denial of service by causing the MySQL Server optimizer to hang or crash repeatedly.

Why it matters to the business

Can lead to unplanned downtime for database services, disrupting operations that rely on MySQL.

How an attack unfolds

An attacker with high privileges connects to the MySQL server over the network and crafts specific queries or commands that exploit a flaw in the optimizer component, leading to a server crash or hang.

How to fix it

Upgrade MySQL Server to a version later than 8.0.37 and 8.4.0. Apply vendor patches as they become available and restrict unnecessary network exposure.

How to confirm the fix worked

Confirm upgraded server version, review release notes for the optimizer fix, and perform functional testing of query workloads to ensure stability.

Typical attack path

1. Obtain high-privileged database credentials
2. Establish network connection to MySQL via supported protocols
3. Submit crafted queries targeting the optimizer
4. Trigger repeated server hang or crash

How to detect it

Review MySQL error logs and crash dumps for optimizer-related failures; correlate with privileged account activity and network connections around the time of incidents.

What your security team should do

• Prioritize patching affected MySQL instances to the latest fixed releases
• Limit network access to database servers using firewalls and access controls
• Audit and minimize high-privileged accounts with network connectivity