China National Vulnerability DatabaseCNVD-2022-89431Oracle MySQL Server Denial of Service Vulnerability (CNVD-2022-89431)
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Oracle MySQL Server is a relational database from Oracle Corporation (USA). A denial-of-service vulnerability exists in the Server: Connection Handling component of Oracle MySQL Server. An attacker can exploit the vulnerability to access the network via multiple protocols, which can compromise MySQL Server and cause MySQL Server to hang or crash frequently and repeatedly (full DOS).
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle mysql >=8.0， | le | 8.0.30 | |
| oracle mysql >=5.7.0， | le | 5.7.39 |
Related
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H