Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-commonUpgrade rapidjson-develUpgrade mysql-develUpgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade rapidjson-docUpgrade perl-DBD-MySQLUpgrade mecabUpgrade mecab-develUpgrade mysql-errmsgUpgrade mysqlUpgrade mysql-test-dataUpgrade mysql-testUpgrade mecab-ipadic | Jun 7, 2026 | Jun 4, 2026 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql84-clientUpgrade mysql84-serverUpgrade mysql80-clientUpgrade mysql96-clientUpgrade mysql96-server | May 21, 2026 | May 19, 2026 |
| Oracle Mysql | — | Upgrade to MySQL version 9.7.0Upgrade to MySQL version 8.4.9Upgrade to MySQL version 8.0.46 | Apr 22, 2026 | Apr 21, 2026 |
| Oracle_linux | — | Upgrade mecab-develUpgrade mysql-develUpgrade mysql8.4-develUpgrade mysql-serverUpgrade mysql-commonUpgrade rapidjson-docUpgrade mysql8.4-libsUpgrade mysql-libsUpgrade mysql8.4-test-dataUpgrade mysql8.4-errmsgUpgrade mysql8.4Upgrade rapidjson-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-errmsgUpgrade mysql-test-dataUpgrade mecabUpgrade mecab-ipadicUpgrade mysql8.4-serverUpgrade mysql8.4-commonUpgrade perl-DBD-MySQLUpgrade mysql-testUpgrade mysql8.4-testUpgrade mysql | Oct 22, 2026 | Apr 21, 2026 |
| Redhat_linux | — | Upgrade mecab-ipadic-EUCJPUpgrade perl-DBD-MySQL-debugsourceUpgrade mysql-errmsgUpgrade mysql8.4-devel-debuginfoUpgrade mecab-develUpgrade perl-DBD-MySQLUpgrade mysql-test-dataUpgrade mysqlUpgrade mysql8.4-commonUpgrade mysql8.4-libs-debuginfoUpgrade mysql8.4-debugsourceUpgrade mysql-server-debuginfoUpgrade mysql-testUpgrade mysql8.4-libsUpgrade rapidjson-develUpgrade mecab-ipadicUpgrade mysql-develUpgrade mysql-libsUpgrade mysql8.4-develUpgrade mysql8.4-test-dataUpgrade mysql8.4-serverUpgrade mysql8.4Upgrade mysql8.4-errmsgUpgrade mysql8.4-test-debuginfoUpgrade mysql-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql8.4-testUpgrade mecabUpgrade perl-DBD-MySQL-debuginfoUpgrade mysql-serverUpgrade mecab-debugsourceUpgrade mysql-debugsourceUpgrade mysql-test-debuginfoUpgrade rapidjson-docUpgrade mysql8.4-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql8.4-server-debuginfoUpgrade mysql-commonUpgrade mecab-debuginfo | May 28, 2026 | Apr 21, 2026 |
| Rocky_linux | — | Upgrade mysql8.4-devel-debuginfoUpgrade mysql8.4-test-debuginfoUpgrade mysql8.4-debugsourceUpgrade mysql-devel-debuginfoUpgrade mysqlUpgrade mecab-develUpgrade perl-DBD-MySQL-debugsourceUpgrade mysql-develUpgrade mysql-server-debuginfoUpgrade mecabUpgrade mysql-debugsourceUpgrade mysql-errmsgUpgrade mysql8.4-libs-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql8.4Upgrade mysql8.4-testUpgrade mysql8.4-debuginfoUpgrade mysql8.4-develUpgrade mecab-ipadicUpgrade mecab-debugsourceUpgrade mysql8.4-libsUpgrade mysql-test-debuginfoUpgrade mysql-testUpgrade mysql-debuginfoUpgrade mecab-debuginfoUpgrade mysql-serverUpgrade mysql8.4-server-debuginfoUpgrade perl-DBD-MySQL-debuginfoUpgrade rapidjson-develUpgrade mysql-libsUpgrade mysql8.4-serverUpgrade perl-DBD-MySQLUpgrade mysql-commonUpgrade mecab-ipadic-EUCJP | Jun 8, 2026 | Jun 4, 2026 |
| Ubuntu | — | Upgrade mysql-server-8.0 (Ubuntu Pro)Upgrade mysql-server-8.0Upgrade mysql-server | Jun 2, 2026 | Jun 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 21, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub