Oracle MySQL Server Vulnerability in Optimizer Component Allows Denial-of-Service

A denial-of-service vulnerability has been identified in the MySQL Server product of Oracle MySQL, specifically within the Server: Optimizer component. This vulnerability affects MySQL Server versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. The issue is easily exploitable, allowing a low-privileged attacker with network access via multiple protocols to cause a complete hang or frequently repeatable crash of the MySQL Server.

Impact

Exploitation of this vulnerability leads to a complete denial-of-service condition, causing MySQL Server to hang or crash frequently and repetitively.

Remediation

Users can apply the latest security patches available through the Oracle MySQL Critical Patch Update April 2025. Instructions for applying these patches can be found in the MySQL Patch Availability Document on My Oracle Support.