Oracle MySQL InnoDB Denial-of-Service and Data Manipulation Vulnerability

A vulnerability has been identified in the MySQL Server component of Oracle MySQL, affecting versions 8.0.0 through 8.0.43, 8.4.0 through 8.4.6, and 9.0.0 through 9.4.0. This vulnerability allows a high-privileged attacker with network access to MySQL Server to cause a complete denial-of-service by hanging the server or causing a frequent, repeatable crash. Additionally, the vulnerability permits unauthorized updates, inserts, or deletions of certain accessible data within MySQL Server.

Impact

Exploitation of this vulnerability leads to a complete denial-of-service condition on the MySQL Server, causing it to hang or crash frequently and repeatedly. Furthermore, it allows unauthorized modifications to some of the data accessible on the MySQL Server, including the ability to update, insert, or delete information.