PT-2026-34102 · Oracle+1 · Mysql Server+1

Published 2026-04-21 · Updated 2026-06-04 · CVE-2026-34278

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.45

Description An issue in the Server: Optimizer component of Oracle MySQL allows a high privileged attacker with network access via multiple protocols to compromise the server. Successful exploitation can lead to a hang or frequently repeatable crash, resulting in a complete denial of service (DOS), which is a condition where the system becomes unavailable to legitimate users.

Recommendations Update MySQL Server to a version later than 8.0.45.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2026:23332

CVE-2026-34278

OESA-2026-2118

OESA-2026-2119

OESA-2026-2120

OESA-2026-2153

OESA-2026-2154

USN-8363-1

USN-8363-2

Affected Products

Mysql Server

Ubuntu

References · 114

• https://ubuntu.com/security/CVE-2026-22017 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8363-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8363-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34304 · Security Note
• https://ubuntu.com/security/CVE-2026-35237 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8363-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34303 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34278 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35238 · Security Note
• https://ubuntu.com/security/CVE-2026-34318 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22001 · Security Note
• https://ubuntu.com/security/CVE-2026-34319 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35237 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22017 · Security Note
• https://ubuntu.com/security/CVE-2026-34293 · Vendor Advisory