CVE-2019-2974: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

Security readout for executives and security teams

CVE-2019-2974 is a MySQL Server availability flaw in the Optimizer component. A low-privileged attacker who can reach MySQL over the network could make the database hang or crash repeatedly, causing a complete denial of service. The bundle does not show data theft or data modification impact. Exposure is most likely where affected MySQL Server versions are reachable by users or applications with low-privileged database credentials. Internet-facing or broadly reachable database services raise urgency. Downstream packaged MySQL deployments should be checked against their vendor advisories. Prioritize remediation for production databases that support critical services, especially if MySQL is reachable beyond tightly controlled application hosts. This is not described as a data breach vulnerability, but repeated database outages can directly affect revenue, operations, and customer trust. Mitigation focus: Upgrade affected MySQL Server installations using Oracle or distribution vendor guidance.; Move beyond 5.6.45, 5.7.27, and 8.0.17 affected release lines where applicable.; Restrict MySQL network access to trusted application hosts and administration paths..

Prepared

Jun 6, 2026, 12:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.