PT-2026-3711 · Oracle+3 · Oracle Mysql+3

Published 2026-01-20 · Updated 2026-04-01 · CVE-2026-21964

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0

Description An issue exists in the Server: Thread Pooling component of Oracle MySQL that allows a high-privileged attacker with network access to cause a denial-of-service (complete hang or frequent crash) condition. The issue is easily exploitable via multiple protocols.

Recommendations Update Oracle MySQL to a version later than 8.0.44 Update Oracle MySQL to a version later than 8.4.7 Update Oracle MySQL to a version later than 9.5.0

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2026:4162

ALSA-2026:4828

ALSA-2026:5580

ALSA-2026:5640

ALSA-2026:6391

AZL-74949

AZL-75008

BDU:2026-00699

CVE-2026-21964

OESA-2026-1196

RHSA-2026:4162

RHSA-2026:4828

RHSA-2026:5580

RHSA-2026:5640

RHSA-2026:6391

USN-7994-1

USN-8006-1

Affected Products

Linuxmint

Mysql Server

Oracle Mysql

Ubuntu

References · 68

• https://ubuntu.com/security/CVE-2026-21941 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-5580.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53053 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-21964 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-21968 · Security Note
• https://errata.almalinux.org/9/ALSA-2026-5640.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-8006-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-6391.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00699 · Security Note
• https://ubuntu.com/security/CVE-2026-21936 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-4828.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:4162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53045 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7994-1 · Vendor Advisory