Cloudanix VulnDB

CVE-2024-21203

Medium · 4.9

CVSS

4.9

EPSS

0.9%

Published

Oct 15, 2024

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A flaw in the database server lets someone with special access crash or freeze the system, stopping applications that need it from working until it is restarted.

Exploitation
Remote Authenticated
Attacker needs
High Privilege
Complexity
Low
Impact
Denial Of Service
Component
Network Service
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

High-privileged network attacker can trigger a hang or repeatable crash in the MySQL Server full-text search (FTS) component, resulting in complete denial of service.

Why it matters to the business

Database unavailability disrupts dependent applications and services, potentially causing operational downtime until the server is restarted.

How an attack unfolds

An attacker with high privileges connects to the MySQL Server over the network and sends specially crafted requests targeting the FTS component to induce a hang or crash.

How to fix it

Upgrade affected MySQL Server installations to versions beyond 8.0.39, 8.4.2, or 9.0.1. For the xlrelease-plugin, upgrade to 22.0.1 or later.

How to confirm the fix worked

Verify MySQL Server version is newer than the listed affected releases and confirm the FTS component no longer allows the crash condition under high-privileged network access.

Typical attack path

  1. Obtain high-privileged network access to MySQL Server
  2. Connect via supported protocols
  3. Issue crafted queries or commands to the FTS component
  4. Trigger repeated hang or crash resulting in DoS

How to detect it

Review database error and crash logs for repeated FTS-related failures or hangs originating from network connections by privileged accounts.

What your security team should do

  • Apply the latest MySQL Server patches immediately due to easy exploitability
  • Restrict high-privileged network access to only trusted sources
  • Monitor for unusual crash or hang events in database logs
  • Test patched versions in a staging environment before production deployment

The record

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:8 mecab 0 0.996-2.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab 0 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux:8 mecab-devel 0 0.996-2.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab-devel 0 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux:8 mecab-ipadic 0 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab-ipadic-EUCJP 0 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-common 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-devel 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-errmsg 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-libs 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-server 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-test 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:9 mysql 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-common 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-devel 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-errmsg 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-libs 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-server 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-test 0 8.0.41-2.el9_5
Rocky Linux:8 mecab 0 0:0.996-2.module+el8.10.0+1676+9b4b6e24
Rocky Linux:8 mecab-ipadic 0 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
Rocky Linux:8 mysql 0 0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
Rocky Linux:9 mysql 0 0:8.0.41-2.el9_5
Ubuntu:14.04:LTS mysql-5.5 0 No fix
Ubuntu:20.04:LTS mariadb-10.3 0 No fix
Ubuntu:Pro:14.04:LTS mysql-5.5 0 No fix
Ubuntu:Pro:16.04:LTS mysql-5.7 0 No fix

Related vulnerabilities