CVE Database›Document archive›CVE-2026-101731

CVE-2026-101731

mysql: MySQL Server: Denial of service in the Server Optimizer

Loading…

Severity

Moderate

Red Hat Product Security

4.9

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · October 23, 2026

Description

A flaw was found in the MySQL Server Optimizer. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the server to hang or crash repeatedly. This issue results in a complete denial of service (DoS) for the database service.

Statement

This flaw is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires an attacker to already possess high administrative privileges on the target database instance. Although an authenticated administrator can trigger a denial of service by causing the database server process to terminate unexpectedly or stop responding during query optimization, the vulnerability does not compromise data confidentiality or integrity. Furthermore, standard database deployments restrict elevated account privileges to authorized administrators, significantly limiting potential exposure.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-400 · Uncontrolled Resource Consumption