Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mysql | Oracle | 8.0.0 (including) | 8.0.42 (including) |
| Mysql | Oracle | 8.4.0 (including) | 8.4.5 (including) |
| Mysql | Oracle | 9.0.0 (including) | 9.3.0 (including) |
| Red Hat Enterprise Linux 10 | RedHat | mysql8.4-0:8.4.6-2.el10_0 | * |
| Red Hat Enterprise Linux 10 | RedHat | mysql-selinux-0:1.0.14-1.el10_0 | * |
| Red Hat Enterprise Linux 9 | RedHat | mysql:8.4-9060020250910121712.rhel9 | * |
| Mariadb-10.3 | Ubuntu | esm-apps/focal | * |
| Mysql-5.5 | Ubuntu | esm-infra-legacy/trusty | * |
| Mysql-5.7 | Ubuntu | esm-infra/bionic | * |
| Mysql-5.7 | Ubuntu | esm-infra/xenial | * |
| Mysql-8.0 | Ubuntu | jammy | * |
| Mysql-8.0 | Ubuntu | noble | * |
| Mysql-8.0 | Ubuntu | upstream | * |
| Mysql-8.4 | Ubuntu | devel | * |
| Mysql-8.4 | Ubuntu | plucky | * |
| Mysql-8.4 | Ubuntu | upstream | * |