CVE Database›Document archive›CVE-2026-101752

CVE-2026-101752

mysql: mysql: Denial of Service in Server: Components Services

Loading…

Severity

Moderate

Red Hat Product Security

4.4

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · October 23, 2026

Description

A flaw was found in the MySQL Server Components Services. A high-privileged remote attacker with network access can exploit this vulnerability under specific conditions to cause a Denial of Service (DoS). Successful exploitation allows an attacker to cause the server to hang or crash repeatedly, disrupting availability.

Statement

This vulnerability is rated with a Moderate severity impact because triggering the denial of service requires an attacker to possess elevated administrative privileges and successfully navigate high attack complexity. Red Hat Enterprise Linux is not affected by this flaw, as the vulnerable Server Components Services architecture was introduced in later upstream releases that are not present in supported enterprise platforms. The risk is further constrained because the issue only impacts service availability, leaving data confidentiality and integrity intact.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.4
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')