MySQL Server vulnerabilities

Vulnerability in the MySQL Server component of Oracle MySQL allows a low privileged attacker with network access to compromise the MySQL Server. Attacks may lead to hanging or frequently repeatable crashes of the server, resulting in a complete denial of service (DoS).

Vulnerability in the MySQL Server component of Oracle MySQL allows a low privileged attacker with network access to compromise MySQL Server. Attacks may lead to hangs or frequent crashes of the server, resulting in complete denial of service.

Vulnerability in Oracle MySQL's MySQL Server and MySQL Cluster (component: Server: Optimizer). Affected versions are MySQL Server 9.7.0-9.7.1 and MySQL Cluster 9.7.0-9.7.1. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the server.

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) allows a high-privileged attacker to cause a hang or frequent crash (DOS) over the network. Network access and multiple protocols are required.

MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 have a vulnerability in the GIS component allowing a low-privileged attacker to remotely cause a hang or frequent crash (full DoS).

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Pluggable Auth) in specified versions. Difficult to exploit, unauthenticated attacker with local logon can modify data.

Vulnerability in MySQL Server and MySQL Cluster (Oracle MySQL) allows a high-privileged attacker with network access via multiple protocols to take over the server. Affects MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1.

Vulnerability in MySQL Server and MySQL Cluster (component: Server: X Plugin) in multiple versions. It is easy to exploit, requires no authentication and network access. Successful attack can cause hang or frequent crashes (complete denial of service) and unauthorized read access to some data.

MySQL Server (versions 8.4.0-8.4.10, 9.7.0-9.7.1) and MySQL Cluster (versions 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1) have a vulnerability in the Server: Replication component. A privileged attacker with local access can cause a hang or frequent crashes (complete DOS).

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is difficult, requires network access via multiple protocols.

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) affects MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can take over the server or cluster. Exploitation is difficult.

Difficult-to-exploit vulnerability in MySQL Server and MySQL Cluster, requiring user interaction. A low-privileged attacker with logon access can take over the server.

Vulnerability in MySQL Server and MySQL Cluster (Server: Clone Plugin component) in versions: MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. Difficult to exploit vulnerability allows a high-privileged attacker with network access via multiple protocols to take over MySQL Server and MySQL Cluster.

Vulnerability in Oracle MySQL's MySQL Server and MySQL Cluster products (component: InnoDB). Affected versions include MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the server or cluster.

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is easy, requires network access via multiple protocols.

Vulnerability in MySQL Server and MySQL Cluster (component: InnoDB) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is easy, requires network access via multiple protocols.