Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysqlUpgrade mysql-testUpgrade mecabUpgrade mysql-errmsgUpgrade mysql-test-dataUpgrade mecab-ipadic-EUCJPUpgrade mecab-develUpgrade mysql-libsUpgrade mecab-ipadicUpgrade mysql-commonUpgrade mysql-serverUpgrade rapidjson-docUpgrade mysql-develUpgrade rapidjson-devel | Mar 23, 2026 | Mar 17, 2026 |
| Freebsd | — | Upgrade mysql94-serverUpgrade mysql84-serverUpgrade mysql91-serverUpgrade mysql80-server | Jan 27, 2026 | Jan 24, 2026 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.8Upgrade to MySQL version 8.0.45Upgrade to MySQL version 9.6.0 | Jan 21, 2026 | Jan 20, 2026 |
| Oracle_linux | — | Upgrade mecab-ipadicUpgrade mysql-serverUpgrade mysql8.4-test-dataUpgrade mysql-develUpgrade mysql8.4-serverUpgrade mysql8.4-errmsgUpgrade mysql-testUpgrade mecab-develUpgrade mysql-test-dataUpgrade mecabUpgrade mysql8.4-commonUpgrade mysql8.4-testUpgrade rapidjson-develUpgrade mysql-commonUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mysql-errmsgUpgrade mysql8.4-libsUpgrade mysqlUpgrade mysql8.4Upgrade rapidjson-docUpgrade mysql8.4-devel | Mar 12, 2026 | Jan 20, 2026 |
| Redhat_linux | — | Upgrade mecabUpgrade mysql8.4-testUpgrade mysql-devel-debuginfoUpgrade mysql8.4Upgrade mysql8.4-serverUpgrade mysql-serverUpgrade mysql-debuginfoUpgrade mysql8.4-test-dataUpgrade mysql8.4-test-debuginfoUpgrade mysql8.4-develUpgrade mysql-debugsourceUpgrade rapidjson-docUpgrade mysqlUpgrade mysql8.4-server-debuginfoUpgrade mysql-errmsgUpgrade mecab-debugsourceUpgrade mysql8.4-debuginfoUpgrade mysql-commonUpgrade mysql-libs-debuginfoUpgrade mecab-develUpgrade mysql8.4-errmsgUpgrade mysql8.4-libsUpgrade mysql-server-debuginfoUpgrade rapidjson-develUpgrade mysql8.4-debugsourceUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade mecab-ipadicUpgrade mecab-debuginfoUpgrade mysql8.4-commonUpgrade mysql-develUpgrade mysql-test-dataUpgrade mysql-testUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-libs-debuginfoUpgrade mysql8.4-devel-debuginfo | Mar 12, 2026 | Jan 20, 2026 |
| Rocky_linux | — | Upgrade mysql8.4-serverUpgrade mysql8.4-test-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql8.4-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql8.4-libsUpgrade rapidjson-develUpgrade mysql8.4-develUpgrade mysql-commonUpgrade mysql8.4-server-debuginfoUpgrade mysql-debugsourceUpgrade mysql-libsUpgrade mysql8.4Upgrade mysql-serverUpgrade mysql-libs-debuginfoUpgrade mysql-debuginfoUpgrade mecab-debuginfoUpgrade mysql-testUpgrade mysql8.4-testUpgrade mysqlUpgrade mysql8.4-devel-debuginfoUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mecab-debugsourceUpgrade mysql8.4-libs-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mecab-develUpgrade mysql8.4-debugsourceUpgrade mysql-server-debuginfoUpgrade mysql-develUpgrade mecab | Mar 20, 2026 | Mar 18, 2026 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-serverUpgrade mysql-server-8.0 (Ubuntu Pro) | Feb 3, 2026 | Jan 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub