CVE-2026-101788
mysql: mysql: Denial of Service via Server Components Services
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in MySQL Server and MySQL Cluster within the Server Components Services. This vulnerability allows an unauthenticated remote attacker with network access via multiple protocols to cause a Denial of Service (DoS). A successful attack can cause the database server to hang or repeatedly crash.
Statement
This vulnerability is assessed as having Moderate impact for Red Hat deployments because, while an unauthenticated network attacker can trigger service unavailability, successful execution requires high attack complexity and cannot be leveraged to expose or modify data. In typical enterprise environments, database services are isolated within secured network perimeters rather than exposed to untrusted external traffic, which significantly limits practical exploitation opportunities.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 · Allocation of Resources Without Limits or Throttling