CVE-2024-21508

Versions of the package mysql2 before 3.9.4 are vulnerable to Remote Code Execution (RCE) via the readCodeFor function due to improper validation of the supportBigNumbers and bigNumberStrings values.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://blog.slonser.info/posts/mysql2-attacker-configuration/
https://github.com/sidorares/node-mysql2/blob/1609b5393516d72a4ae47196837317fbe75e0c13/lib/parsers/text_parser.js%23L14C10-L14C21
https://github.com/sidorares/node-mysql2/commit/74abf9ef94d76114d9a09415e28b496522a94805
https://github.com/sidorares/node-mysql2/pull/2572
https://github.com/sidorares/node-mysql2/releases/tag/v3.9.4
https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6591085
https://blog.slonser.info/posts/mysql2-attacker-configuration/
https://github.com/sidorares/node-mysql2/blob/1609b5393516d72a4ae47196837317fbe75e0c13/lib/parsers/text_parser.js%23L14C10-L14C21
https://github.com/sidorares/node-mysql2/commit/74abf9ef94d76114d9a09415e28b496522a94805
https://github.com/sidorares/node-mysql2/pull/2572
https://github.com/sidorares/node-mysql2/releases/tag/v3.9.4
https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6591085

Configurations

No configuration.

History

No history.

Information

Published : 2024-04-11 05:15

Updated : 2024-11-21 08:54

NVD link : CVE-2024-21508

Mitre link : CVE-2024-21508

CVE.ORG link : CVE-2024-21508

JSON object : View

Products Affected

No product.

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2024-21508", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "report@snyk.io", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-04-11T05:15:47.263", "references": [{"url": "https://blog.slonser.info/posts/mysql2-attacker-configuration/", "source": "report@snyk.io"}, {"url": "https://github.com/sidorares/node-mysql2/blob/1609b5393516d72a4ae47196837317fbe75e0c13/lib/parsers/text_parser.js%23L14C10-L14C21", "source": "report@snyk.io"}, {"url": "https://github.com/sidorares/node-mysql2/commit/74abf9ef94d76114d9a09415e28b496522a94805", "source": "report@snyk.io"}, {"url": "https://github.com/sidorares/node-mysql2/pull/2572", "source": "report@snyk.io"}, {"url": "https://github.com/sidorares/node-mysql2/releases/tag/v3.9.4", "source": "report@snyk.io"}, {"url": "https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6591085", "source": "report@snyk.io"}, {"url": "https://blog.slonser.info/posts/mysql2-attacker-configuration/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/sidorares/node-mysql2/blob/1609b5393516d72a4ae47196837317fbe75e0c13/lib/parsers/text_parser.js%23L14C10-L14C21", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/sidorares/node-mysql2/commit/74abf9ef94d76114d9a09415e28b496522a94805", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/sidorares/node-mysql2/pull/2572", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/sidorares/node-mysql2/releases/tag/v3.9.4", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6591085", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "report@snyk.io", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Versions of the package mysql2 before 3.9.4 are vulnerable to Remote Code Execution (RCE) via the readCodeFor function due to improper validation of the supportBigNumbers and bigNumberStrings values."}, {"lang": "es", "value": "Las versiones del paquete mysql2 anteriores a la 3.9.4 son vulnerables a la ejecuci\u00f3n remota de c\u00f3digo (RCE) a trav\u00e9s de la funci\u00f3n readCodeFor debido a una validaci\u00f3n incorrecta de los valores supportBigNumbers y bigNumberStrings."}], "lastModified": "2024-11-21T08:54:34.803", "sourceIdentifier": "report@snyk.io"}