CVE-2024-20978

2024-01-1700:00:00

ubuntu.com

vulnerability

oracle mysql

server hang

unauthorized access

high privileged attacker

network access

dos.

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

JSON

Vulnerability in the MySQL Server product of Oracle MySQL (component:
Server: Optimizer). Supported versions that are affected are 8.0.35 and
prior and 8.2.0 and prior. Easily exploitable vulnerability allows high
privileged attacker with network access via multiple protocols to
compromise MySQL Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability
impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Notes

Author	Note
leosilva	since 5.5 is no longer upstream supported and so far we cannot patch it, marking it as ignored.

OSVersionArchitecturePackageVersionFilename
ubuntu23.10noarchmariadb< anyUNKNOWN
ubuntu24.04noarchmariadb< anyUNKNOWN
ubuntu16.04noarchmariadb-10.0< anyUNKNOWN
ubuntu18.04noarchmariadb-10.1< anyUNKNOWN
ubuntu20.04noarchmariadb-10.3< anyUNKNOWN
ubuntu22.04noarchmariadb-10.6< anyUNKNOWN
ubuntu18.04noarchmysql-5.7< anyUNKNOWN
ubuntu16.04noarchmysql-5.7< anyUNKNOWN
ubuntu20.04noarchmysql-8.0< 8.0.36-0ubuntu0.20.04.1UNKNOWN
ubuntu22.04noarchmysql-8.0< 8.0.36-0ubuntu0.22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	23.10	noarch	mariadb	< any	UNKNOWN
ubuntu	24.04	noarch	mariadb	< any	UNKNOWN
ubuntu	16.04	noarch	mariadb-10.0	< any	UNKNOWN
ubuntu	18.04	noarch	mariadb-10.1	< any	UNKNOWN
ubuntu	20.04	noarch	mariadb-10.3	< any	UNKNOWN
ubuntu	22.04	noarch	mariadb-10.6	< any	UNKNOWN
ubuntu	18.04	noarch	mysql-5.7	< any	UNKNOWN
ubuntu	16.04	noarch	mysql-5.7	< any	UNKNOWN
ubuntu	20.04	noarch	mysql-8.0	< 8.0.36-0ubuntu0.20.04.1	UNKNOWN
ubuntu	22.04	noarch	mysql-8.0	< 8.0.36-0ubuntu0.22.04.1	UNKNOWN