CVE Database›Document archive›CVE-2026-101733

CVE-2026-101733

mysql: mysql: Denial of Service via JSON component

Loading…

Severity

Moderate

Red Hat Product Security

6.5

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · October 23, 2026

Description

A flaw was found in the MySQL JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network using multiple protocols. A successful attack can cause the server to hang or repeatedly crash, resulting in a complete Denial of Service (DoS).

Statement

This vulnerability is rated as having a Moderate impact for Red Hat products because, although an attacker can cause a denial of service through an unexpected hang or crash, exploitation requires valid database authentication with low-level privileges. The issue is confined to availability impacts within the JSON handling subsystem, with no impact on data confidentiality or integrity. In standard Red Hat Enterprise Linux deployments where database credentials and network access are strictly controlled, the likelihood of exploitation is significantly reduced.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 · Improper Input Validation