Threats affecting pkg:rpm/oracle/mysql-server

A vulnerability in Oracle MySQL Server and MySQL Cluster versions 26.7.0 and 26.7.1 allows a low privileged attacker with network access to cause a denial of service by hanging or crashing the server. The flaw affects the GIS component and does not impact confidentiality or integrity but results in availability disruption. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. Oracle has included this issue in its October 2026 Critical Patch Update advisory, which contains multiple security patches across many products.

CVE-2026-101732 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating a medium severity level. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across various products.

CVE-2026-101730 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating a medium severity level. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches across Oracle products. However, no explicit patch links or fixed versions are provided in the input data.

CVE-2026-101729 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across Oracle products.

CVE-2026-101724 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released patches for affected versions as part of their October 2026 Critical Patch Update.

CVE-2026-101679 is a high-severity vulnerability affecting multiple versions of Oracle MySQL Server and MySQL Cluster. It allows an unauthenticated attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities, and it strongly recommends applying patches promptly.

CVE-2026-101637 is a vulnerability in Oracle MySQL Server and MySQL Cluster (InnoDB component) affecting specific versions. It allows a high privileged attacker with network access to cause denial of service via server hang or crash and unauthorized modification of some accessible data. The vulnerability has a CVSS 3.1 base score of 5.5, indicating medium severity with integrity and availability impacts.

CVE-2026-101629 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities, and customers are strongly advised to apply the patches promptly.

CVE-2026-101627 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access and high attack complexity to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.4, indicating medium severity. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities, and customers are strongly advised to apply the patches promptly.

A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0 through 9.7.3 allows a low privileged attacker with network access to cause a denial of service (DoS) by triggering a hang or repeated crash. The flaw affects the Server Optimizer component and does not impact confidentiality or integrity but results in availability disruption. The CVSS 3.1 base score is 6.5, indicating a medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products.

CVE-2026-101617 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released patches addressing this vulnerability as part of their October 2026 Critical Patch Update.

CVE-2026-101616 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has released security patches addressing this issue in their October 2026 Critical Patch Update.

CVE-2026-101614 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released security patches addressing this issue as part of their October 2026 Critical Patch Update.

CVE-2026-101610 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released patches for this vulnerability as part of their October 2026 Critical Patch Update.

CVE-2026-101609 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a hang or frequent crash, resulting in a denial of service (DoS). The vulnerability is difficult to exploit and impacts availability without compromising confidentiality or integrity. Oracle has released patches addressing this issue in their October 2026 Critical Patch Update.

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster and unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).

CVE-2026-61144 is a medium severity vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0 through 9.7.1. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability affects the Server Optimizer component and results in availability impact without compromising confidentiality or integrity.