p PatchFirst

CVE-2024-21272

CVE-2024-21272

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS 7.5 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • mysql connectors

    Versions
    • ≥ *, ≤ 9.0.0: Affected (custom)

    No fix published

  • mysql-connector-python PyPI

    Versions
    • 8.0.21
    • 8.0.22
    • 8.0.23
    • 8.0.24
    • 8.0.25
    • 8.0.26
    • 8.0.27
    • 8.0.28
    • 8.0.29
    • 8.0.30
    • 8.0.31
    • 8.0.32
    • 8.0.33
    • 8.0.5
    • 8.1.0
    • 8.2.0
    • 8.3.0
    • 8.4.0
    • 9.0.0
    Affected ranges
    • ECOSYSTEM: < 9.1.0

    Update to 9.1.0

  • mysql-connector-python Ubuntu:16.04:LTS

    Versions
    • 2.0.4-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mysql-connector-python Ubuntu:18.04:LTS

    Versions
    • 2.1.6-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mysql-connector-python Ubuntu:20.04:LTS

    Versions
    • 8.0.15-1
    • 8.0.15-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mysql-connector-python Ubuntu:22.04:LTS

    Versions
    • 8.0.15-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mysql-connector-python Ubuntu:24.04:LTS

    Versions
    • 8.0.15-3
    • 8.0.15-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →