CVE-2024-21162: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. This vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server (Oracle CPU).

The vulnerability has a CVSS 3.1 Base Score of 4.9 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The attack vector is Network-based, with Low attack complexity, requiring High privileges, and No user interaction. The scope is Unchanged, with No impact on confidentiality and integrity, but High impact on availability (Oracle CPU).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. The vulnerability primarily affects the availability of the system, with no direct impact on data confidentiality or integrity (Oracle CPU).

The vulnerability is classified as easily exploitable, requiring a high privileged attacker with network access via multiple protocols. The attack complexity is rated as Low, indicating that the attack can be performed with minimal preparation or additional information gathering (Oracle CPU).

Fixed versions have been released to address this vulnerability. MySQL has been updated to version 8.0.39 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. Users should update their MySQL installations to these patched versions (Ubuntu USN).