Oracle MySQL
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*
- >= 8.0.0, <= 8.0.42
- >= 8.4.0, <= 8.4.5
- >= 9.0.0, <= 9.3.0
A denial-of-service vulnerability has been identified in the MySQL Server product of Oracle MySQL, specifically within the InnoDB component. This issue affects supported versions 8.0.0 through 8.0.42, 8.4.0 through 8.4.5, and 9.0.0 through 9.3.0. The vulnerability is easily exploitable and allows a high-privileged attacker with network access via multiple protocols to disrupt MySQL Server operations. Successful exploitation can lead to unauthorized actions causing the server to hang or crash frequently and repeatably, resulting in a complete denial-of-service condition for MySQL Server.
Exploitation of this vulnerability can cause MySQL Server to hang or crash, leading to a complete denial-of-service condition.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.