Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure MySQL can be crashed by privileged network attacker
published 2 years ago
Summary
Versions of Azure MySQL up to 8.0.37 and 8.4.0 let a user with high privileges and network access cause the server to hang or crash, leading to a denial of service. This can disrupt any applications that rely on the database. Update to the latest MySQL release and limit network access to trusted users to mitigate the risk.
What to do
- Update azure mysql to version 8.0.40-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | mysql |
< 8.0.40-1 Fix: upgrade to 8.0.40-1
|
Original advisory text
CVE-2024-21142 affecting package mysql for versions less than 8.0.40-1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
References
Timeline
Published16 Jul 2024
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-50553 · OSV
Track software like this
Free during beta