Oracle MySQL Enterprise Firewall Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the MySQL Enterprise Firewall component of Oracle MySQL. This issue affects versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The vulnerability is difficult to exploit but allows a high-privileged attacker with network access via multiple protocols to disrupt MySQL Enterprise Firewall. Successful exploitation can lead to a complete hang or a frequently repeatable crash of the firewall component.

Impact

Exploitation of this vulnerability can cause MySQL Enterprise Firewall to hang or crash, leading to a complete denial-of-service condition.