GHSA-6hx8-rgxq-6pp6
Record from GitHub Advisory Database · Published May 14, 2022
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
Risk scores
Timeline
- May 14, 2022 CVE Published
- Apr 9, 2026 Distribution Patch (7 in total, the first dated here)
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-6hx8-rgxq-6pp6
vulnetix vdb fixes GHSA-6hx8-rgxq-6pp6
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-6hx8-rgxq-6pp6/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2017:2192 url
- https://access.redhat.com/errata/RHSA-2017:2787 url
- https://nvd.nist.gov/vuln/detail/CVE-2017-3238 advisory
- https://access.redhat.com/errata/RHSA-2017:2886 url
- https://access.redhat.com/errata/RHSA-2018:0279 url
- http://www.debian.org/security/2017/dsa-3767 url
- http://www.debian.org/security/2017/dsa-3770 url
- http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html url
- https://access.redhat.com/errata/RHSA-2018:0574 url
- https://security.gentoo.org/glsa/201702-17 url
- https://security.gentoo.org/glsa/201702-18 url
- http://www.securityfocus.com/bid/95571 url
- http://www.securitytracker.com/id/1037640 url