Oracle MySQL Server
cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*
- >= 8.0.0, <= 8.0.41
- >= 8.4.0, <= 8.4.4
- >= 9.0.0, <= 9.2.0
A denial-of-service vulnerability has been identified in the MySQL Server product of Oracle MySQL, specifically within the Server: Optimizer component. This issue affects supported versions 8.0.0 through 8.0.41, 8.4.0 through 8.4.4, and 9.0.0 through 9.2.0. The vulnerability is easily exploitable, allowing a high-privileged attacker with network access via multiple protocols to disrupt MySQL Server operations. Successful exploitation can lead to a complete hang or a frequently repeatable crash of the MySQL Server, causing a total denial-of-service.
Exploitation of this vulnerability can cause MySQL Server to hang or crash, leading to a complete denial-of-service condition.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.