optimizer vulnerability

  1. CVE-2024-20965 DoS in MySQL Optimizer: Patch Guidance

    Oracle’s January 2024 Critical Patch Update included a formally tracked flaw—CVE-2024-20965—that targets the MySQL Server Optimizer and can be exploited to cause a sustained or repeatedly reproducible denial-of-service (DoS) condition. Affected upstream releases include MySQL 8.0.35 and earlier...
  2. Mitigating CVE-2024-21171: MySQL Optimizer DoS and Availability

    Oracle’s MySQL Server contains a denial-of-service weakness in the Server: Optimizer component (tracked as CVE-2024-21171) that can be triggered remotely by a low‑privilege, network‑connected MySQL account to cause the server to hang or repeatedly crash, producing a complete loss of availability...