Oracle MySQL
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*
- >= 8.0.0, <= 8.0.41
- >= 8.4.0, <= 8.4.4
- >= 9.0.0, <= 9.2.0
A denial-of-service vulnerability has been identified in the MySQL Server product of Oracle MySQL, specifically within the InnoDB component. This issue affects supported versions 8.0.0 through 8.0.41, 8.4.0 through 8.4.4, and 9.0.0 through 9.2.0. The vulnerability is easily exploitable and allows a high-privileged attacker with network access to MySQL Server via multiple protocols to cause a hang or a frequently repeatable crash, leading to a complete denial-of-service condition on the server.
Exploitation of this vulnerability can cause MySQL Server to hang or crash, resulting in a complete denial-of-service condition.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.