CVE-2019-3004: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).

Security readout for executives and security teams

CVE-2019-3004 is a MySQL Server parser flaw that can let a low-privileged network attacker crash or hang the database service. The documented impact is availability loss, not data theft or data modification. Business risk is highest where MySQL backs customer-facing or operationally critical services. Exposure is likely where MySQL Server 8.0.17 or earlier is reachable by authenticated low-privilege users over supported network protocols. NetApp, Fedora, and Ubuntu advisories indicate downstream environments may also have packaged exposure. Treat this as a service-availability risk. Prioritize patching for production databases, internet-adjacent environments, shared platforms, and systems where a MySQL outage would interrupt revenue, operations, or customer access. Mitigation focus: Identify MySQL Server instances at version 8.0.17 or earlier.; Apply vendor-supported updates from Oracle or your OS/package vendor.; Review NetApp guidance if MySQL is embedded in affected NetApp products..

Prepared

Jun 6, 2026, 12:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.