This vulnerability in Oracle MySQL Connectors (Connector/J component) affects versions 9.7.0 and 9.7.1. An unauthenticated attacker with network access can exploit this issue via multiple protocols to cause the MySQL Connectors to hang or crash repeatedly, resulting in a complete denial of service. Exploitation requires user interaction by a third party. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, but user interaction is required, and the impact is limited to availability with no confidentiality or integrity impact. Oracle has published this vulnerability as part of their July 2026 Critical Patch Update advisory but has not explicitly stated a remediation level or patch availability for these specific versions in the provided advisory content.

The impact of this vulnerability is a denial of service condition on MySQL Connectors, causing them to hang or crash repeatedly. There is no impact on confidentiality or integrity. The attack requires network access and user interaction by a third party, which limits the ease of exploitation but still poses a risk of service disruption.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory (https://www.oracle.com/security-alerts/cpujul2026.html) for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until a patch is confirmed, limit network exposure of MySQL Connectors and educate users to avoid interaction with untrusted content that could trigger the vulnerability.