Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via MySQL Protcol to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-libsUpgrade mysql-testUpgrade mysql-serverUpgrade mysql-commonUpgrade mecab-ipadicUpgrade mecab-ipadic-EUCJPUpgrade mysqlUpgrade mecabUpgrade mysql-develUpgrade mysql-errmsg | Oct 27, 2022 | Oct 20, 2021 |
| Centos_linux | — | Upgrade mecab-debugsourceUpgrade mysql-debuginfoUpgrade mysql-develUpgrade mysql-commonUpgrade mysql-server-debuginfoUpgrade mecab-ipadicUpgrade mysql-serverUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-libs-debuginfoUpgrade mysql-errmsgUpgrade mysql-testUpgrade mysql-debugsourceUpgrade mecabUpgrade mysql-devel-debuginfoUpgrade mysql-test-debuginfoUpgrade mecab-debuginfoUpgrade mysql | Oct 26, 2022 | Oct 20, 2021 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mysql-connector-javaUpgrade mysql80-serverUpgrade mysql80-clientUpgrade mariadb103-serverUpgrade mysql57-serverUpgrade mariadb105-server | Nov 4, 2022 | Oct 17, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.27 | Nov 26, 2021 | Oct 20, 2021 |
| Oracle_linux | — | Upgrade mysql-libsUpgrade mysql-commonUpgrade mysql-testUpgrade mysqlUpgrade mysql-errmsgUpgrade mecab-ipadic-EUCJPUpgrade mecab-ipadicUpgrade mysql-develUpgrade mecabUpgrade mysql-server | Oct 27, 2022 | Oct 19, 2021 |
| Redhat_linux | — | Upgrade mecab-ipadic-EUCJPUpgrade mysql-debuginfoUpgrade mysql-libsUpgrade mysql-serverUpgrade mysql-develUpgrade mysql-test-debuginfoUpgrade mecab-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysqlUpgrade mysql-libs-debuginfoUpgrade mysql-testUpgrade mecab-debugsourceUpgrade mysql-commonUpgrade mysql-debugsourceUpgrade mysql-server-debuginfoUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade mecab | Oct 26, 2022 | Oct 20, 2021 |
| Rocky_linux | — | Upgrade mysql-debuginfoUpgrade mysqlUpgrade mysql-debugsourceUpgrade mysql-develUpgrade mecabUpgrade mysql-devel-debuginfoUpgrade mecab-ipadicUpgrade mysql-libs-debuginfoUpgrade mysql-errmsgUpgrade mysql-server-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mecab-debugsourceUpgrade mysql-commonUpgrade mysql-libsUpgrade mysql-test-debuginfoUpgrade mecab-debuginfoUpgrade mysql-testUpgrade mysql-server | Mar 12, 2024 | Oct 20, 2021 |
| Ubuntu | — | Upgrade mysql-server-5.7Upgrade mysql-server-8.0 | Oct 26, 2021 | Oct 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub