Jingzhou Fu

Integer wraparound in multiple server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This can lead to arbitrary code execution as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the input provider may cause a segmentation fault, which is an error occurring when a program attempts to access a memory location that it is not allowed to access.

An issue exists in the MySQL Server component, specifically within the Optimizer. A low-privileged attacker with network access through multiple protocols can cause a denial-of-service condition, leading to a hang or frequent crashes of the MySQL Server.

A flaw exists in the Oracle MySQL Server component, specifically within the Optimizer. A low-privileged attacker with network access through multiple protocols can exploit this issue to cause a denial-of-service condition, leading to a hang or frequent crashes of the MySQL Server.

A vulnerability exists in the Server: Optimizer component of Oracle MySQL Server. A low-privileged attacker with network access can compromise the server through multiple protocols. Successful exploitation can lead to a denial-of-service (DOS) condition, causing a hang or frequent crashes of the MySQL Server.

A vulnerability exists in the Optimizer component of Oracle MySQL Server. A low-privileged attacker with network access can compromise the server through multiple protocols. Successful exploitation can lead to a denial-of-service (DOS) condition, causing a hang or frequent crashes of the MySQL Server.

The issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.

The issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.

The issue allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.

The issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server.

The issue allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.

The issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server, leading to a denial of service.

The issue allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.

The issue is related to the Server: Optimizer component of MySQL Server, which can be easily exploited by an attacker with low privileges and network access via multiple protocols. This can lead to unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, impacting its availability. The exploitation can occur remotely, allowing the attacker to potentially access or modify protected information and data through the MySQL network protocol.

The issue is related to the Server: Optimizer component of MySQL Server, allowing an attacker with low privileges and network access via multiple protocols to compromise the server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server, impacting its availability. The vulnerability can be exploited remotely, potentially allowing unauthorized access to protected information and modification, addition, or deletion of data using the MySQL network protocol.

The issue is related to an unbounded resource allocation in the MySQL Server product, specifically in the Server: Optimizer component. This can be exploited by a remote attacker with low privileges and network access via multiple protocols, potentially leading to a denial of service (DOS) by causing the MySQL Server to hang or crash repeatedly. The estimated impact is on the availability of the system.

The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the Server: X Plugin component, is related to insufficient input validation. This issue can be exploited by a low-privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in the ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. It allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server.

The issue is related to insufficient input validation in the Server: Optimizer component of the MySQL Server product. This can be exploited by a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the server.

The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a low-privileged attacker with network access via multiple protocols to compromise the server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

The vulnerability is related to insufficient input validation in the Server: Optimizer component of the MySQL Server product. This issue can be exploited by a high-privileged attacker with network access via multiple protocols, allowing them to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server.