CVE-2019-2997: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

Security readout for executives and security teams

This vulnerability can let a highly privileged MySQL user crash or hang MySQL Server remotely. It does not expose data or change data according to the source, but it can create a complete denial of service. Business urgency is highest where MySQL availability supports customer-facing or critical internal systems. Exposure is likely limited to MySQL Server 8.0.17 and earlier, especially instances reachable over network protocols by privileged database users. Downstream package users should check Oracle, Ubuntu, Fedora, and relevant vendor advisories for fixed builds. Treat as a targeted availability risk, not a data-theft issue based on the available sources. Patch during the next controlled maintenance window, sooner for critical systems where a MySQL outage would disrupt revenue, operations, or customer commitments. Mitigation focus: Upgrade MySQL Server using Oracle CPU guidance or your distribution vendor's fixed packages.; Prioritize internet-facing or business-critical MySQL systems running 8.0.17 or earlier.; Restrict MySQL network access to trusted application and administration hosts..

Prepared

Jun 6, 2026, 12:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.