Description
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
References (6)
Core 6
Core References
Mailing List
https://lists.fedoraproject.org/archives/list/[email protected]/message/OR7GNQAJZ7NMHT4HRDNROR3DS272KKET/
Mailing List
https://lists.fedoraproject.org/archives/list/[email protected]/message/UCGSAQFWYIJRIYLZLHPS3MRUS4AQ5JQH/
Mailing List
https://lists.fedoraproject.org/archives/list/[email protected]/message/YZL2AT2ZUKB6K22UTISHEZ4JKG4VZ3VO/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20231027-0009/
Patch, Vendor Advisory vendor-advisory
https://www.oracle.com/security-alerts/cpuoct2023.html
Scores
CVSS v3
4.9
EPSS
0.0698
EPSS Percentile
91.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (7)
fedoraproject/fedora
37
fedoraproject/fedora
38
fedoraproject/fedora
39
mariadb/mariadb
10.4.0 - 10.4.32
netapp/oncommand_insight
oracle/mysql
8.1.0
oracle/mysql
5.7.0 - 5.7.43
Published
Oct 17, 2023
Tracked Since
Feb 18, 2026