This vulnerability in Oracle MySQL Server and MySQL Cluster (component: Server: Optimizer) affects versions 9.7.0 to 9.7.1. It allows a high privileged attacker with network access to cause a hang or repeated crash of the MySQL Server, resulting in a complete denial of service. The CVSS 3.1 base score is 4.9, reflecting an availability impact only. There is no indication of confidentiality or integrity compromise. The vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption). No official patch or remediation level is explicitly stated in the vendor advisory, but the vulnerability is included in Oracle's July 2026 Critical Patch Update advisory, which contains numerous security patches across Oracle products. The vendor strongly recommends applying available patches promptly. No known exploits in the wild have been reported.

Successful exploitation allows an attacker with high privileges and network access to cause a hang or frequent crash of the MySQL Server or MySQL Cluster, resulting in denial of service. There is no impact on confidentiality or integrity. The availability impact can disrupt database services relying on the affected versions.

Oracle's July 2026 Critical Patch Update advisory includes security patches addressing this vulnerability among many others. Although no explicit patch link or remediation level is provided for this specific CVE, Oracle recommends applying the latest Critical Patch Update without delay to mitigate this and other vulnerabilities. Customers should ensure they are running actively supported versions and promptly apply Oracle security patches as they become available.