CVE-2026-101761
mysql: mysql: Denial of Service via security encryption component
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in MySQL. An unauthenticated remote attacker with network access via multiple protocols can exploit this vulnerability in the security encryption component to cause the service to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service (DoS).
Statement
This vulnerability is rated as Moderate severity because exploitation requires overcoming high attack complexity to induce a denial-of-service condition, while confidentiality and integrity remain unaffected. In typical Red Hat Enterprise Linux environments, database services are isolated within protected internal network segments or configured to listen only on trusted interfaces, limiting unauthenticated exposure. Consequently, the flaw primarily impacts service availability under specific conditions rather than allowing arbitrary code execution or data exposure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 · Allocation of Resources Without Limits or Throttling