Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductMysql (73f061c3-5e03-5b81-8702-d9e22bdb3e50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mysql/mysql-server purl2cpe 2026-06-01 10:18:14.710805

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-20998 vulnerable 2026-06-08 06:27:31.887220 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2024-04-16T21:25:57.177Z
Updated: 2025-02-13T17:32:51.736Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.