REDHAT-BUG-2318927: Medium severity Oracle MySQL Server vulnerability

Q: What level of access does an attacker need?

An attacker needs high privileges on the MySQL Server and network access through multiple protocols. No user interaction is required.

Q: What is the expected impact of successful exploitation?

Successful exploitation can cause MySQL Server to hang or repeatedly crash, resulting in a complete denial of service. The provided CVSS vector indicates no confidentiality or integrity impact.

Q: Which MySQL Server releases are affected?

Affected supported releases include MySQL Server 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier.

Published Oct 15, 2024

Updated

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected Software

1 affected component

Oracle MySQL Server<8.0.39, <8.4.2, <9.0.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Oracle MySQL (InnoDB) to a version that resolves this vulnerability.
Fixed in 8.0.39
Upgrade
Upgrade Oracle MySQL (InnoDB) to a version that resolves this vulnerability.
Fixed in 8.4.2
Upgrade
Upgrade Oracle MySQL (InnoDB) to a version that resolves this vulnerability.
Fixed in 9.0.1

Event History

Oct 15, 2024

Data Sourced

via Red Hat·08:09 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What level of access does an attacker need?

An attacker needs high privileges on the MySQL Server and network access through multiple protocols. No user interaction is required.

What is the expected impact of successful exploitation?

Successful exploitation can cause MySQL Server to hang or repeatedly crash, resulting in a complete denial of service. The provided CVSS vector indicates no confidentiality or integrity impact.

Which MySQL Server releases are affected?

Affected supported releases include MySQL Server 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier.

REDHAT-BUG-2318927: Medium severity Oracle MySQL Server vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need?

What is the expected impact of successful exploitation?

Which MySQL Server releases are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

What is the expected impact of successful exploitation?

Which MySQL Server releases are affected?