Fluid Attacks Database

Description

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
rpm rhel8	mysql	-	-
rpm rhel9	mysql	<0:8.0.46-1.el9_8	0:8.0.46-1.el9_8
rpm rhel10	mysql8.4	<0:8.4.9-1.el10_2	0:8.4.9-1.el10_2

Aliases

1. CVE-2026-343032. NVD-2026-343033. OSV-2026-34303

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.