Zongrui Peng

The issue allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.

The issue allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.

The issue is related to an unbounded resource allocation in the MySQL Server product, specifically in the Server: Optimizer component. This can be exploited by a remote attacker with low privileges and network access via multiple protocols, potentially leading to a denial of service (DOS) by causing the MySQL Server to hang or crash repeatedly. The estimated impact is on the availability of the system.

The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the Server: X Plugin component, is related to insufficient input validation. This issue can be exploited by a low-privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in the ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

The issue is related to incorrect resource cleanup or deallocation in the Server: Optimizer component of Oracle MySQL Server, allowing a low-privileged attacker with network access via multiple protocols to compromise the server. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.