Vulnerability · Published Apr 21, 2026 · Assigned by oracle
CVE-2026-34304
Medium 4.9
In plain English
A medium-severity uncontrolled resource consumption in MySQL Server from Oracle Corporation. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.3%top 74.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | mecab | 0.996-2.module_el8.10.0+4060+d4256e26 | ALSA-2026:26180 |
| AlmaLinux:8 | mecab | 0.996-2.module_el8.6.0+3340+d764b636 | ALSA-2026:25919 |
| AlmaLinux:8 | mecab | 0.996-2.module_el8.10.0+3965+b415b607 | ALSA-2026:25919 |
| AlmaLinux:9 | mecab | 0.996-3.module_el9.6.0+152+8cbce00c.4 | ALSA-2026:25052 |
| AlmaLinux:8 | mecab-devel | 0.996-2.module_el8.10.0+3965+b415b607 | ALSA-2026:25919 |
| AlmaLinux:8 | mecab-devel | 0.996-2.module_el8.10.0+4060+d4256e26 | ALSA-2026:26180 |
| AlmaLinux:8 | mecab-devel | 0.996-2.module_el8.6.0+3340+d764b636 | ALSA-2026:25919 |
| AlmaLinux:9 | mecab-devel | 0.996-3.module_el9.6.0+152+8cbce00c.4 | ALSA-2026:25052 |
| AlmaLinux:8 | mecab-ipadic | 2.7.0.20070801-17.module_el8.10.0+4142+0b28b031 | ALSA-2026:25919 |
| AlmaLinux:8 | mecab-ipadic | 2.7.0.20070801-17.module_el8.10.0+4154+a69a9128 | ALSA-2026:26180 |
| AlmaLinux:8 | mecab-ipadic | 2.7.0.20070801-17.module_el8.10.0+4060+d4256e26 | ALSA-2026:26180 |
| AlmaLinux:8 | mecab-ipadic | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 | ALSA-2026:25919 |
| AlmaLinux:9 | mecab-ipadic | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c | ALSA-2026:25052 |
| AlmaLinux:8 | mecab-ipadic-EUCJP | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 | ALSA-2026:25919 |
| AlmaLinux:8 | mecab-ipadic-EUCJP | 2.7.0.20070801-17.module_el8.10.0+4142+0b28b031 | ALSA-2026:25919 |
| AlmaLinux:8 | mecab-ipadic-EUCJP | 2.7.0.20070801-17.module_el8.10.0+4154+a69a9128 | ALSA-2026:26180 |
| AlmaLinux:8 | mecab-ipadic-EUCJP | 2.7.0.20070801-17.module_el8.10.0+4060+d4256e26 | ALSA-2026:26180 |
| AlmaLinux:9 | mecab-ipadic-EUCJP | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c | ALSA-2026:25052 |
| AlmaLinux:8 | mysql | 8.0.46-1.module_el8.10.0+4192+724bc664 | ALSA-2026:25919 |
| AlmaLinux:8 | mysql | 8.4.9-1.module_el8.10.0+4193+cbb8e728 | ALSA-2026:26180 |
| AlmaLinux:9 | mysql | 8.4.9-1.module_el9.8.0+263+ff5e95cf | ALSA-2026:25052 |
| AlmaLinux:9 | mysql | 8.0.46-1.el9_8 | ALSA-2026:23332 |
| AlmaLinux:8 | mysql-common | 8.0.46-1.module_el8.10.0+4192+724bc664 | ALSA-2026:25919 |
| AlmaLinux:8 | mysql-common | 8.4.9-1.module_el8.10.0+4193+cbb8e728 | ALSA-2026:26180 |
| AlmaLinux:9 | mysql-common | 8.4.9-1.module_el9.8.0+263+ff5e95cf | ALSA-2026:25052 |
| AlmaLinux:9 | mysql-common | 8.0.46-1.el9_8 | ALSA-2026:23332 |
| AlmaLinux:8 | mysql-devel | 8.0.46-1.module_el8.10.0+4192+724bc664 | ALSA-2026:25919 |
| AlmaLinux:8 | mysql-devel | 8.4.9-1.module_el8.10.0+4193+cbb8e728 | ALSA-2026:26180 |
| AlmaLinux:9 | mysql-devel | 8.0.46-1.el9_8 | ALSA-2026:23332 |
| AlmaLinux:9 | mysql-devel | 8.4.9-1.module_el9.8.0+263+ff5e95cf | ALSA-2026:25052 |
| AlmaLinux:8 | mysql-errmsg | 8.4.9-1.module_el8.10.0+4193+cbb8e728 | ALSA-2026:26180 |
| AlmaLinux:8 | mysql-errmsg | 8.0.46-1.module_el8.10.0+4192+724bc664 | ALSA-2026:25919 |
| AlmaLinux:9 | mysql-errmsg | 8.0.46-1.el9_8 | ALSA-2026:23332 |
| AlmaLinux:9 | mysql-errmsg | 8.4.9-1.module_el9.8.0+263+ff5e95cf | ALSA-2026:25052 |
| AlmaLinux:8 | mysql-libs | 8.4.9-1.module_el8.10.0+4193+cbb8e728 | ALSA-2026:26180 |
| AlmaLinux:8 | mysql-libs | 8.0.46-1.module_el8.10.0+4192+724bc664 | ALSA-2026:25919 |
| AlmaLinux:9 | mysql-libs | 8.0.46-1.el9_8 | ALSA-2026:23332 |
| AlmaLinux:9 | mysql-libs | 8.4.9-1.module_el9.8.0+263+ff5e95cf | ALSA-2026:25052 |
| AlmaLinux:8 | mysql-server | 8.0.46-1.module_el8.10.0+4192+724bc664 | ALSA-2026:25919 |
| AlmaLinux:8 | mysql-server | 8.4.9-1.module_el8.10.0+4193+cbb8e728 | ALSA-2026:26180 |
| AlmaLinux:9 | mysql-server | 8.4.9-1.module_el9.8.0+263+ff5e95cf | ALSA-2026:25052 |
| AlmaLinux:9 | mysql-server | 8.0.46-1.el9_8 | ALSA-2026:23332 |
| AlmaLinux:8 | mysql-test | 8.0.46-1.module_el8.10.0+4192+724bc664 | ALSA-2026:25919 |
| AlmaLinux:8 | mysql-test | 8.4.9-1.module_el8.10.0+4193+cbb8e728 | ALSA-2026:26180 |
| AlmaLinux:9 | mysql-test | 8.0.46-1.el9_8 | ALSA-2026:23332 |
| AlmaLinux:9 | mysql-test | 8.4.9-1.module_el9.8.0+263+ff5e95cf | ALSA-2026:25052 |
| AlmaLinux:8 | mysql-test-data | 8.4.9-1.module_el8.10.0+4193+cbb8e728 | ALSA-2026:26180 |
| AlmaLinux:9 | mysql-test-data | 8.4.9-1.module_el9.8.0+263+ff5e95cf | ALSA-2026:25052 |
| AlmaLinux:10 | mysql8.4 | 8.4.9-1.el10_2.alma.1 | ALSA-2026:20693 |
| AlmaLinux:10 | mysql8.4-common | 8.4.9-1.el10_2.alma.1 | ALSA-2026:20693 |
| AlmaLinux:10 | mysql8.4-devel | 8.4.9-1.el10_2.alma.1 | ALSA-2026:20693 |
| AlmaLinux:10 | mysql8.4-errmsg | 8.4.9-1.el10_2.alma.1 | ALSA-2026:20693 |
| AlmaLinux:10 | mysql8.4-libs | 8.4.9-1.el10_2.alma.1 | ALSA-2026:20693 |
| AlmaLinux:10 | mysql8.4-server | 8.4.9-1.el10_2.alma.1 | ALSA-2026:20693 |
| AlmaLinux:10 | mysql8.4-test | 8.4.9-1.el10_2.alma.1 | ALSA-2026:20693 |
| AlmaLinux:10 | mysql8.4-test-data | 8.4.9-1.el10_2.alma.1 | ALSA-2026:20693 |
| AlmaLinux:9 | perl-DBD-MySQL | 4.053-3.module_el9.8.0+235+a38ba90c | ALSA-2026:25052 |
| AlmaLinux:9 | rapidjson-devel | 1.1.0-19.module_el9.6.0+152+8cbce00c | ALSA-2026:25052 |
| AlmaLinux:9 | rapidjson-doc | 1.1.0-19.module_el9.6.0+152+8cbce00c | ALSA-2026:25052 |
| Rocky Linux:8 | mecab | 0:0.996-2.module+el8.10.0+1676+9b4b6e24 | RLSA-2026:26180 |
| Rocky Linux:8 | mecab | 0:0.996-2.module+el8.10.0+2091+db4d14f6 | RLSA-2026:25919 |
| Rocky Linux:8 | mecab | 0:0.996-2.module+el8.10.0+1676+9b4b6e24 | RLSA-2026:25919 |
| Rocky Linux:8 | mecab | 0:0.996-2.module+el8.10.0+1937+28fbbc83 | RLSA-2026:25919 |
| Rocky Linux:8 | mecab | 0:0.996-2.module+el8.10.0+1937+28fbbc83 | RLSA-2026:26180 |
| Rocky Linux:8 | mecab | 0:0.996-2.module+el8.10.0+2091+db4d14f6 | RLSA-2026:26180 |
| Rocky Linux:9 | mecab | 0:0.996-3.module+el9.8.0+40162+a76274f1.4 | RLSA-2026:25052 |
| Rocky Linux:8 | mecab-ipadic | 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83 | RLSA-2026:26180 |
| Rocky Linux:8 | mecab-ipadic | 0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6 | RLSA-2026:25919 |
| Rocky Linux:8 | mecab-ipadic | 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83 | RLSA-2026:25919 |
| Rocky Linux:8 | mecab-ipadic | 0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6 | RLSA-2026:26180 |
| Rocky Linux:9 | mecab-ipadic | 0:2.7.0.20070801-24.module+el9.8.0+40162+a76274f1 | RLSA-2026:25052 |
| Rocky Linux:9 | mysql | 0:8.0.46-1.el9_8.rocky.0.1 | RLSA-2026:23332 |
| Rocky Linux:10 | mysql8.4 | 0:8.4.9-1.el10_2.rocky.0.1 | RLSA-2026:20693 |
| Rocky Linux:9 | perl-DBD-MySQL | 0:4.053-3.module+el9.8.0+40162+a76274f1 | RLSA-2026:25052 |
| Rocky Linux:9 | rapidjson | 0:1.1.0-19.module+el9.8.0+40162+a76274f1 | RLSA-2026:25052 |
| Ubuntu:22.04:LTS | mysql-8.0 | 8.0.46-0ubuntu0.22.04.2 | USN-8363-1 |
| Ubuntu:22.04:LTS | mysql-8.0 | 8.0.46-0ubuntu0.22.04.2 | UBUNTU-CVE-2026-34304 |
| Ubuntu:24.04:LTS | mysql-8.0 | 8.0.46-0ubuntu0.24.04.2 | UBUNTU-CVE-2026-34304 |
| Ubuntu:24.04:LTS | mysql-8.0 | 8.0.46-0ubuntu0.24.04.2 | USN-8363-1 |
| Ubuntu:25.10 | mysql-8.4 | 8.4.9-0ubuntu0.25.10.1 | UBUNTU-CVE-2026-34304 |
| Ubuntu:25.10 | mysql-8.4 | 8.4.9-0ubuntu0.25.10.1 | USN-8363-1 |
| Ubuntu:26.04:LTS | mysql-8.4 | 8.4.9-0ubuntu0.26.04.1 | UBUNTU-CVE-2026-34304 |
| Ubuntu:26.04:LTS | mysql-8.4 | 8.4.9-0ubuntu0.26.04.1 | USN-8363-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | MySQL Server | 8.0.0 – through 8.0.458.4.0 – through 8.4.89.0.0 – through 9.6.0 |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
References
- Oracle Advisory vendor-advisory