Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-commonUpgrade mysql-testUpgrade mysql-serverUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mecabUpgrade mysqlUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mysql-devel | Oct 27, 2022 | Oct 20, 2021 |
| Centos_linux | — | Upgrade mysql-devel-debuginfoUpgrade mysql-server-debuginfoUpgrade mecab-ipadicUpgrade mecab-ipadic-EUCJPUpgrade mysql-develUpgrade mecab-debugsourceUpgrade mysql-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecabUpgrade mysqlUpgrade mecab-debuginfoUpgrade mysql-debugsourceUpgrade mysql-libsUpgrade mysql-errmsgUpgrade mysql-test-debuginfoUpgrade mysql-testUpgrade mysql-serverUpgrade mysql-common | Oct 26, 2022 | Oct 20, 2021 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mysql80-serverUpgrade mysql80-clientUpgrade mariadb103-serverUpgrade mysql-connector-javaUpgrade mariadb105-serverUpgrade mysql57-server | Nov 4, 2022 | Oct 17, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.27 | Nov 26, 2021 | Oct 20, 2021 |
| Oracle_linux | — | Upgrade mysql-commonUpgrade mysqlUpgrade mecabUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade mysql-testUpgrade mysql-develUpgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-libs | Oct 27, 2022 | Oct 19, 2021 |
| Redhat_linux | — | Upgrade mysqlUpgrade mysql-serverUpgrade mysql-devel-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql-develUpgrade mecabUpgrade mysql-debugsourceUpgrade mysql-errmsgUpgrade mysql-testUpgrade mecab-debugsourceUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade mysql-debuginfoUpgrade mecab-debuginfoUpgrade mysql-server-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mecab-ipadic | Oct 26, 2022 | Oct 20, 2021 |
| Rocky_linux | — | Upgrade mysql-test-debuginfoUpgrade mysql-devel-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mecab-debuginfoUpgrade mysql-serverUpgrade mysql-develUpgrade mysql-testUpgrade mysql-server-debuginfoUpgrade mysql-debugsourceUpgrade mecab-debugsourceUpgrade mecab-ipadicUpgrade mecabUpgrade mysql-errmsgUpgrade mysql-libs-debuginfoUpgrade mysql-commonUpgrade mysqlUpgrade mysql-debuginfo | Mar 12, 2024 | Oct 20, 2021 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server-5.7 | Oct 26, 2021 | Oct 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub