Oracle MySQL InnoDB Denial-of-Service and Data Manipulation Vulnerability

A vulnerability has been identified in the MySQL Server component of Oracle MySQL, affecting versions 8.0.0 through 8.0.42, 8.4.0 through 8.4.5, and 9.0.0 through 9.3.0. This vulnerability allows a high-privileged attacker with network access to MySQL Server to cause a complete denial-of-service by hanging the server or causing a frequent, repeatable crash. Additionally, the vulnerability permits unauthorized updates, inserts, or deletions of some data accessible to MySQL Server.

Impact

Exploitation of this vulnerability leads to a complete denial-of-service on the MySQL Server, causing it to hang or crash frequently and repeatedly. Furthermore, it allows unauthorized modifications to some of the data accessible on the MySQL Server.