Lucene search

K
cveVulDBCVE-2024-1193
HistoryFeb 02, 2024 - 9:15 p.m.

CVE-2024-1193

2024-02-0221:15:08
CWE-404
VulDB
web.nvd.nist.gov
15
vulnerability
navicat
12.0.29
denial of service
mysql connection handler
exploit
vdb-252683
nvd

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

0

Percentile

5.1%

A vulnerability was found in Navicat 12.0.29. It has been rated as problematic. This issue affects some unknown processing of the component MySQL Conecction Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252683. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected configurations

Nvd
Vulners
Node
navicatnavicatMatch12.0.29premium
VendorProductVersionCPE
navicatnavicat12.0.29cpe:2.3:a:navicat:navicat:12.0.29:*:*:*:premium:*:*:*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Navicat",
    "versions": [
      {
        "version": "12.0.29",
        "status": "affected"
      }
    ],
    "modules": [
      "MySQL Conecction Handler"
    ]
  }
]

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2024-1193