PT-2026-34091 · Oracle · Mysql Server

Published 2026-04-21 · Updated 2026-06-03 · CVE-2026-34267

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.45

Description An issue exists in the Server: Optimizer component of Oracle MySQL. A high-privileged attacker with network access via multiple protocols can exploit this flaw to cause a hang or frequently repeatable crash, resulting in a complete denial of service (DoS), which is a condition where the system becomes unavailable to users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-34267

OESA-2026-2118

OESA-2026-2119

OESA-2026-2120

OESA-2026-2153

OESA-2026-2154

USN-8363-1

USN-8363-2

Affected Products

Mysql Server

References · 67

• https://ubuntu.com/security/CVE-2026-34318 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8363-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35238 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2120 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22015 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34270 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34303 · Security Note
• https://ubuntu.com/security/CVE-2026-35239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34270 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34304 · Security Note
• https://ubuntu.com/security/CVE-2026-34319 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22001 · Security Note
• https://ubuntu.com/security/CVE-2026-35240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35239 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-35237 · Security Note