Oracle MySQL InnoDB Component Denial-of-Service and Data Manipulation Vulnerability

A vulnerability exists in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component. Affected versions include 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This vulnerability is easily exploitable and allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful exploitation can lead to an unauthorized ability to cause a hang or a frequently repeatable crash, resulting in a complete denial-of-service for the MySQL Server. Additionally, it allows unauthorized update, insert, or delete access to some data accessible by the MySQL Server.

Impact

Exploitation of this vulnerability can cause a complete denial-of-service by hanging or frequently crashing the MySQL Server. It also allows unauthorized modifications to data, including updates, inserts, or deletions, depending on the data accessible to the MySQL Server.