Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-testUpgrade mecabUpgrade mysql-errmsgUpgrade mecab-develUpgrade mysqlUpgrade mecab-ipadicUpgrade mysql-test-dataUpgrade perl-DBD-MySQLUpgrade mysql-libsUpgrade mysql-develUpgrade mysql-serverUpgrade mysql-commonUpgrade rapidjson-docUpgrade rapidjson-develUpgrade mecab-ipadic-EUCJP | Jun 7, 2026 | Jun 4, 2026 |
| Freebsd | — | Upgrade mysql84-clientUpgrade mysql80-serverUpgrade mysql80-clientUpgrade mysql84-serverUpgrade mysql96-clientUpgrade mysql96-server | May 21, 2026 | May 19, 2026 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.9Upgrade to MySQL version 9.7.0Upgrade to MySQL version 8.0.46 | Apr 22, 2026 | Apr 21, 2026 |
| Redhat_linux | — | Upgrade mysql-debugsourceUpgrade mysql8.4-develUpgrade rapidjson-develUpgrade mysql8.4-libsUpgrade mysql8.4-commonUpgrade mysqlUpgrade mysql-develUpgrade mecab-develUpgrade perl-DBD-MySQLUpgrade mysql8.4-libs-debuginfoUpgrade mysql-test-dataUpgrade mysql-libsUpgrade mecab-ipadicUpgrade mysql8.4-devel-debuginfoUpgrade mysql8.4-debugsourceUpgrade mysql-server-debuginfoUpgrade mysql-errmsgUpgrade mecab-ipadic-EUCJPUpgrade perl-DBD-MySQL-debugsourceUpgrade mysql-testUpgrade rapidjson-docUpgrade mysql8.4-serverUpgrade mysql8.4-debuginfoUpgrade perl-DBD-MySQL-debuginfoUpgrade mysql8.4-test-dataUpgrade mysql8.4-test-debuginfoUpgrade mysql8.4Upgrade mysql-serverUpgrade mysql-libs-debuginfo | May 28, 2026 | Apr 21, 2026 |
| Rocky_linux | — | Upgrade mecab-debugsourceUpgrade mecab-ipadicUpgrade mysqlUpgrade mysql8.4-develUpgrade mecabUpgrade mysql8.4-testUpgrade mysql8.4Upgrade mysql8.4-debugsourceUpgrade mysql-server-debuginfoUpgrade mecab-develUpgrade mysql8.4-debuginfoUpgrade mysql8.4-libs-debuginfoUpgrade mysql-errmsgUpgrade mysql-devel-debuginfoUpgrade mysql-debugsourceUpgrade mysql8.4-devel-debuginfoUpgrade mysql-develUpgrade mysql8.4-test-debuginfoUpgrade mysql-libs-debuginfoUpgrade perl-DBD-MySQL-debugsourceUpgrade mysql8.4-libsUpgrade mysql-test-debuginfoUpgrade mysql-debuginfoUpgrade mecab-debuginfoUpgrade mysql-commonUpgrade mysql8.4-server-debuginfoUpgrade mysql-testUpgrade mysql-serverUpgrade mysql8.4-serverUpgrade rapidjson-develUpgrade mysql-libsUpgrade perl-DBD-MySQLUpgrade mecab-ipadic-EUCJPUpgrade perl-DBD-MySQL-debuginfo | Jun 8, 2026 | Jun 4, 2026 |
| Ubuntu | — | Upgrade mysql-serverUpgrade mysql-server-8.0 (Ubuntu Pro)Upgrade mysql-server-8.0 | Jun 2, 2026 | Jun 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub