Oracle MySQL Server Denial-of-Service Vulnerability in Optimizer Component

A denial-of-service vulnerability has been identified in the MySQL Server product of Oracle MySQL, specifically in the Optimizer component. This issue affects MySQL Server versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The vulnerability is easily exploitable by a low-privileged attacker with network access through multiple protocols, allowing them to cause a hang or a frequently repeatable crash of the MySQL Server.

Impact

Exploitation of this vulnerability leads to a complete denial-of-service condition, causing MySQL Server to hang or crash frequently and repeatably.