Oracle MySQL Server Denial-of-Service Vulnerability in the Optimizer Component

A denial-of-service vulnerability has been identified in the MySQL Server product of Oracle MySQL, specifically within the Optimizer component. This issue affects MySQL versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.0 through 9.6.0. The vulnerability is easily exploitable, allowing a high-privileged attacker with network access to MySQL Server via multiple protocols to cause a hang or a frequently repeatable crash, leading to a complete denial-of-service condition on the server.

Impact

Exploitation of this vulnerability can cause MySQL Server to hang or crash, leading to a complete denial-of-service condition.