Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via MySQL Protcol to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

🗓️ 16 Dec 2021 08:00:00Reported by MicrosoftType

Vulnerability in MySQL Server Optimizer lets high privileged attackers with network access via MySQL protocol crash the server.

Reporter	Title	Published	Views	Family All 256
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	12 May 202214:14	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0081: mysql:8.0 (ALINUX3-SA-2023:0081)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : mysql:8.0 (ALSA-2022:7119)	25 Oct 202200:00	–	nessus
Tenable Nessus	CentOS 8 : mysql:8.0 (CESA-2022:7119)	25 Oct 202200:00	–	nessus
Tenable Nessus	MiracleLinux 8 : mysql:8.0 (AXSA:2022-4027:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	MySQL 8.0.x < 8.0.27 Multiple Vulnerabilities (Oct 2021 CPU)	20 Oct 202100:00	–	nessus
Tenable Nessus	Oracle Linux 8 : mysql:8.0 (ELSA-2022-7119)	27 Oct 202200:00	–	nessus
Tenable Nessus	RHEL 7 : rh-mysql80-mysql (RHSA-2022:6518)	14 Sep 202200:00	–	nessus
Tenable Nessus	RHEL 8 : mysql:8.0 (RHSA-2022:7119)	26 Oct 202200:00	–	nessus
Tenable Nessus	Rocky Linux 8 : mysql:8.0 (RLSA-2022:7119)	7 Nov 202300:00	–	nessus

Vulners

Node

16 Dec 2021 08:00Current

7High risk

Vulners AI Score7

CVSS 24

CVSS 3.14.9

EPSS0.00309

SSVC