Oracle MySQL Server Denial-of-Service and Data Manipulation Vulnerability

A vulnerability has been identified in Oracle MySQL Server versions 8.0.0 through 8.0.43, 8.4.0 through 8.4.6, and 9.0.0 through 9.4.0. This vulnerability allows a high-privileged attacker with network access to MySQL Server to cause a complete denial-of-service by hanging the server or causing a frequent, repeatable crash. Additionally, it allows unauthorized updates, inserts, or deletions of some accessible data within MySQL Server.

Impact

Exploitation of this vulnerability leads to a complete denial-of-service condition on the MySQL Server, causing it to hang or crash frequently. Furthermore, it allows unauthorized modifications to some of the data accessible on the MySQL Server, including updates, inserts, or deletions.