VDB

GCVE-110-NCSC-2024-420

GCVE-110-NCSC-2024-420
Advisory PublishedCVSS 9.8/10
Vulnetix · Advisory published October 17, 2024
Allocation of Resources Without Limits or Throttling

Weaknesses (CWE)

CWE-122Heap-based Buffer OverflowCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-125Out-of-bounds ReadCWE-400Uncontrolled Resource ConsumptionCWE-130Improper Handling of Length Parameter InconsistencyCWE-345Insufficient Verification of Data Authenticity

Risk Scores

CVSS 3.1
9.8/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
oraclemysql_enterprise_backup
oraclemysql_cluster
oraclemysql_connectors
oraclemysql_server
oraclemysql_enterprise_monitor
oraclemysql
oraclemysql_workbench
oraclemysql_client

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

75,248 records in the GCVE database · Updated July 30, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›