CVE-2024-21090: 
MySQL vulnerability analysis and mitigation

A vulnerability has been identified in the MySQL Connectors product of Oracle MySQL, specifically affecting the Connector/Python component. The vulnerability affects versions 8.3.0 and prior. This security flaw (CVE-2024-21090) has been assigned a CVSS 3.1 Base Score of 7.5, indicating a HIGH severity rating (Oracle Advisory).

The vulnerability is characterized by its ease of exploitation and can be accessed through multiple protocols. It has been assigned a CVSS vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating network accessibility, low attack complexity, no privileges required, no user interaction needed, unchanged scope, and high impact on availability (Oracle Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. The impact is primarily focused on availability, with no direct effect on confidentiality or integrity (Oracle Advisory).

The vulnerability is considered easily exploitable by unauthenticated attackers with network access via multiple protocols. No special privileges or user interaction is required to exploit this vulnerability (Oracle Advisory).

Oracle has released security patches as part of their April 2024 Critical Patch Update. Users are strongly advised to apply these security patches as soon as possible to address this vulnerability. The patches are available for supported versions that are covered under Premier Support or Extended Support phases of the Lifetime Support Policy (Oracle Advisory).