CVE Database›Document archive›CVE-2026-101614

CVE-2026-101614

mysql: mysql: Denial of Service in InnoDB component

Loading…

Severity

Moderate

Red Hat Product Security

4.9

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · October 24, 2026

Description

A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. This issue results in a complete Denial of Service (DoS), rendering the database service unavailable to legitimate users.

Statement

This vulnerability is evaluated as Moderate because successful exploitation requires an attacker to possess elevated database privileges, substantially lowering the likelihood of exploitation in standard production environments. While an attack can lead to a complete denial of service through an unrecoverable hang or crash, it cannot compromise system confidentiality or modify database contents. In standard Red Hat deployments, high-privilege access to database management interfaces is strictly restricted to trusted administrative personnel.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-400 · Uncontrolled Resource Consumption