CVE-2024-20993: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) affects versions 8.0.35 and prior, and 8.2.0 and prior. The vulnerability was disclosed on April 16, 2024, as part of Oracle's Critical Patch Update (Oracle Advisory).

This is an easily exploitable vulnerability that allows high privileged attackers with network access to compromise MySQL Server via multiple protocols. The vulnerability has been assigned a CVSS 3.1 Base Score of 4.9 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. The vulnerability only affects availability, with no impact on confidentiality or integrity (Oracle Advisory).

The vulnerability requires a high-privileged attacker with network access. The attack complexity is rated as Low, requiring no user interaction, and can be executed remotely through multiple protocols (NVD).

Oracle has released patches to address this vulnerability in MySQL version 8.0.36. Users are strongly recommended to update to this version. The fix is available through Oracle's Critical Patch Update from April 2024 (Oracle Advisory, NetApp Advisory).