REDHAT-BUG-2380280: Medium severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to the MySQL Server (DML on Oracle MySQL Server) so only trusted hosts can connect over the affected network protocols.
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2380280?
REDHAT-BUG-2380280 is classified as an easily exploitable vulnerability that allows low privileged attackers to compromise MySQL Server.
How do I fix REDHAT-BUG-2380280?
To fix REDHAT-BUG-2380280, upgrade your MySQL Server to a version that is not affected, specifically versions above 8.0.42, 8.4.5, or 9.3.0.
What versions of MySQL Server are affected by REDHAT-BUG-2380280?
Affected versions include MySQL Server 8.0.0-8.0.42, 8.4.0-8.4.5, and 9.0.0-9.3.0.
Can REDHAT-BUG-2380280 be exploited remotely?
Yes, REDHAT-BUG-2380280 can be exploited by a low privileged attacker with network access via multiple protocols.
What component of MySQL Server does REDHAT-BUG-2380280 affect?
REDHAT-BUG-2380280 affects the DML component of the MySQL Server product.