MySQL Shell vulnerabilities

An easily exploitable vulnerability exists in Oracle MySQL Shell (Shell: Core Client component) in versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. A low-privileged attacker with logon to the infrastructure where MySQL Shell executes can cause a hang or frequently repeatable crash (complete DoS), requiring user interaction.

Vulnerability in MySQL Shell (component: Shell: Core Client) affecting versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. A difficult-to-exploit flaw allows a high-privileged attacker with network access to gain unauthorized access to critical data or all MySQL Shell accessible data, with possible impact on additional products (scope change).

An easily exploitable vulnerability exists in Oracle MySQL Shell (Shell: Core Client component) in versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. A low-privileged attacker with logon to the infrastructure where MySQL Shell executes can cause a hang or frequently repeatable crash (complete DoS), requiring user interaction.

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: General/Core Client) affects versions 8.0.28 and prior. It allows an unauthenticated attacker with access to the infrastructure where MySQL Shell runs to compromise it, requiring interaction from a person other than the attacker.