Cloudanix VulnDB

CVE-2024-21204

Medium · 4.9

CVSS

4.9

EPSS

0.9%

Published

Oct 15, 2024

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A flaw lets certain trusted users who can reach the database over the network crash it, briefly stopping any applications that rely on that database.

Exploitation
Remote Authenticated
Attacker needs
High Privilege
Complexity
Low
Impact
Denial Of Service
Component
Network Service
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

High-privileged network attacker can trigger a hang or repeatable crash in the Server: PS component, resulting in complete denial of service for the MySQL Server process.

Why it matters to the business

Database availability is lost until manual restart, interrupting dependent applications and potentially causing operational downtime with no data loss or confidentiality impact.

How an attack unfolds

An attacker with high database privileges connects over supported network protocols and sends specially crafted input to the PS component, causing the server to hang or crash repeatedly.

How to fix it

Upgrade affected MySQL Server installations (8.4.0 and 9.0.1 and prior) to the latest patched release that resolves the Server: PS denial-of-service issue.

How to confirm the fix worked

Confirm the running MySQL version is no longer in the affected range and attempt controlled high-privileged test connections to verify the crash condition is absent.

Typical attack path

  1. Obtain high-privileged network credentials
  2. Connect to MySQL via supported protocols
  3. Submit crafted requests targeting the Server: PS component
  4. Induce repeated server hang or crash

How to detect it

Review MySQL error logs and process monitoring for repeated crash or hang events originating from authenticated high-privileged sessions; correlate with network connection timestamps.

What your security team should do

  • Apply the vendor-supplied patch immediately
  • Restrict network access to MySQL instances to only trusted sources
  • Review and minimize the number of high-privileged accounts
  • Monitor database availability metrics for unexpected restarts

The record

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.4.0 and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected packages

Ecosystem Package Introduced Fixed
Ubuntu:14.04:LTS mysql-5.5 0 No fix
Ubuntu:20.04:LTS mariadb-10.3 0 No fix
Ubuntu:Pro:14.04:LTS mysql-5.5 0 No fix
Ubuntu:Pro:16.04:LTS mysql-5.7 0 No fix

Related vulnerabilities