CVE-2024-20975: 
MySQL vulnerability analysis and mitigation

A vulnerability (CVE-2024-20975) was discovered in the MySQL Server product of Oracle MySQL, specifically affecting the Server Optimizer component. The vulnerability affects MySQL Server versions 8.2.0 and prior. This security issue was disclosed as part of Oracle's January 2024 Critical Patch Update (Oracle CPU).

The vulnerability has been assigned a CVSS v3.1 Base Score of 6.5 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The technical assessment indicates that this is an easily exploitable vulnerability that can be accessed through multiple network protocols. The attack requires low privilege level and no user interaction (Oracle CPU, NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete denial of service (DOS) of MySQL Server. The vulnerability primarily impacts system availability, with no direct effects on confidentiality or integrity (Oracle CPU).

Oracle has released patches to address this vulnerability as part of its January 2024 Critical Patch Update. Organizations are strongly recommended to apply these security patches as soon as possible to affected MySQL Server installations. The fix is available for supported versions through the official Oracle channels (Oracle CPU).