CVE Database›Document archive›CVE-2026-101618

CVE-2026-101618

mysql: mysql: Denial of Service in InnoDB

Loading…

Severity

Moderate

Red Hat Product Security

4.9

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · October 23, 2026

Description

A flaw was found in MySQL. A high-privileged remote attacker with network access can exploit this vulnerability in the InnoDB component to cause a Denial of Service (DoS). Successful exploitation allows the attacker to trigger a hang or repeatable server crash, rendering the database unavailable.

Statement

Red Hat rates this vulnerability with Moderate severity because successful exploitation requires high-level administrative credentials on the MySQL database. While an authenticated administrator can cause the daemon to hang or terminate abruptly through InnoDB operations, the flaw cannot lead to unauthorized information disclosure or privilege escalation. Unauthenticated users and accounts with standard privileges cannot trigger this condition under typical configurations.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-617 · Reachable Assertion