CVE Database›Document archive›CVE-2026-101804

CVE-2026-101804

mysql-connector-odbc: MySQL Connector/ODBC: Partial denial of service

Loading…

Severity

Low

Red Hat Product Security

2.5

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · November 4, 2026

Description

A flaw was found in MySQL Connector/ODBC. An unauthenticated attacker with local logon access to the host infrastructure, with the assistance of user interaction, can exploit this vulnerability to disrupt service operations. A successful attack allows the adversary to cause a partial Denial of Service (DoS), potentially crashing the local client application or interrupting database connectivity.

Statement

This vulnerability is rated as Low severity because exploitation requires local infrastructure access, complex conditions, and user interaction, while the resulting impact is strictly limited to a partial denial of service. In Red Hat environments, MySQL Connector/ODBC functions as a client-side database connectivity driver. Because the flaw cannot be triggered remotely over the network without user intervention and does not compromise data confidentiality or integrity, typical automated client and server operations face minimal risk.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 2.5
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-617 · Reachable Assertion