CVE-2017-10279: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

Security readout for executives and security teams

CVE-2017-10279 is a denial-of-service flaw in Oracle MySQL Server. An attacker who already has high privileges and network access can make the database hang or crash repeatedly. The main business risk is service disruption, not data theft or modification, based on the published CVSS impact. Exposure is most likely where affected MySQL versions are reachable over the network by privileged database users, applications, administrators, or compromised privileged accounts. Systems using downstream MySQL packages from vendors such as Red Hat or NetApp products should check their advisory status. Treat this as a targeted availability risk for legacy MySQL systems. Prioritize internet-exposed or business-critical databases, especially where privileged credentials may be broadly shared or stored in applications. It is not described as a data disclosure or integrity compromise in the provided sources. Mitigation focus: Apply Oracle MySQL CPU October 2017 guidance or downstream vendor packages for affected deployments.; Upgrade affected MySQL Server 5.6.36 or earlier and 5.7.18 or earlier to vendor-fixed releases.; Limit network access to MySQL services to trusted application and administration paths..

Prepared

Jun 12, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.