CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CVE-2024-20998

mediumCVSS 4.9covered by 1 sourcefirst seen 2026-08-06

CSIRTS triage

vendor: Oracleproduct: MySQL ServerDenial of serviceaffected: 8.0.36 and prior; 8.3.0 and prior
What
A vulnerability in the Server Optimizer component allows high-privileged network attackers to cause denial of service.
Who is affected
MySQL Server 8.0.36 and earlier, and 8.3.0 and earlier deployments accessible over network.
Urgency
Medium priority; requires high privilege and network access, not currently exploited.
Action
Upgrade to MySQL Server 8.0.37 or 8.3.1 or later versions.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2024-20998

Get an email if CVE-2024-20998 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Advisory coverage (1)

External references

NVD record for CVE-2024-20998

CVE.org record

Embed the live status

CVE-2024-20998 live status badge — this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2024-20998 status](https://www.csirts.com/badge/CVE-2024-20998)](https://www.csirts.com/cve/CVE-2024-20998)