Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54311
HistoryJul 22, 2022 - 12:00 a.m.

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2022-54311)

2022-07-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Oracle MySQL Server is a relational database from Oracle Corporation. A denial-of-service vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.29 and prior versions. An attacker can use this vulnerability to compromise MySQL Server by accessing the network via multiple protocols, which in turn can cause MySQL Server to hang or crash frequently and repeatedly (a complete denial of service).

CPENameOperatorVersion
oracle mysql serverlt8.0.29

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H