Oracle MySQL Server Pluggable Authentication Vulnerability Allowing Partial Denial-of-Service

A vulnerability has been identified in Oracle MySQL Server versions 9.0.0 through 9.5.0, specifically within the Pluggable Authentication component. This easily exploitable vulnerability allows a high-privileged attacker with network access to MySQL Server via multiple protocols to cause a partial denial-of-service. The issue arises in the authentication process, where improper handling can lead to service disruptions.

Impact

Exploitation of this vulnerability can cause a partial denial-of-service on the MySQL Server, disrupting normal operations but not completely shutting down the service.