Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-testUpgrade mecab-develUpgrade mysqlUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade mysql-libsUpgrade mecabUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mysql-develUpgrade mysql-common | Feb 21, 2025 | Oct 15, 2024 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.40Upgrade to MySQL version 8.4.3Upgrade to MySQL version 9.1.0 | Oct 18, 2024 | Oct 15, 2024 |
| Oracle_linux | — | Upgrade mysql-serverUpgrade mysql-errmsgUpgrade mysql-develUpgrade mecabUpgrade mysql-testUpgrade mysqlUpgrade mecab-develUpgrade mysql-commonUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mecab-ipadic | Feb 25, 2025 | Oct 15, 2024 |
| Redhat_linux | — | Upgrade mysql-commonUpgrade mysqlUpgrade mysql-serverUpgrade mysql-errmsgUpgrade mysql-testUpgrade mecabUpgrade mysql-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecab-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-develUpgrade mysql-debugsourceUpgrade mecab-ipadicUpgrade mecab-develUpgrade mecab-debugsourceUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-devel-debuginfo | Feb 20, 2025 | Oct 15, 2024 |
| Rocky_linux | — | Upgrade mysql-server-debuginfoUpgrade mysql-debugsourceUpgrade mysql-testUpgrade mecab-ipadicUpgrade mysql-debuginfoUpgrade mysqlUpgrade mecab-debugsourceUpgrade mysql-commonUpgrade mysql-errmsgUpgrade mysql-libs-debuginfoUpgrade mecabUpgrade mysql-libsUpgrade mecab-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql-serverUpgrade mysql-develUpgrade mysql-test-debuginfoUpgrade mecab-develUpgrade mecab-ipadic-EUCJP | Feb 27, 2025 | Oct 15, 2024 |
| Ubuntu | — | Upgrade mysql-server-8.0 | Nov 13, 2024 | Oct 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub