CVE-2017-10167: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

Security readout for executives and security teams

CVE-2017-10167 is a MySQL Server availability flaw in the Optimizer component. A low-privileged network attacker could make affected MySQL 5.7.19 and earlier servers hang or crash repeatedly, causing service disruption. The sources describe denial of service only, not data theft or tampering. Exposure is most likely where MySQL 5.7.19 or earlier is still deployed and accepts network connections from application users, tenants, partners, or less-trusted internal networks. Internet exposure would increase urgency, but the bundle does not state typical deployment exposure. Handle as moderate priority, expedited for business-critical or externally reachable databases. The primary business risk is outage, not confidentiality loss. Legacy MySQL 5.7.19 and earlier systems should be remediated through vendor-supported updates or compensating access controls. Mitigation focus: Identify all MySQL Server instances and versions.; Upgrade or patch using applicable Oracle, Red Hat, NetApp, or vendor guidance.; Restrict MySQL network access to trusted application hosts..

Prepared

Jun 12, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.