MySQL Cluster vulnerabilities

A vulnerability in Oracle MySQL Cluster (Cluster: NDB Operator component) affects version 9.7.3. A low-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of MySQL Cluster.

Vulnerability in MySQL Cluster (component InnoDB) affecting versions 8.0.0-8.0.37. A difficult-to-exploit attack requiring physical access can cause a hang or repeatable crash (complete DoS).

Vulnerability in MySQL Cluster (component Cluster: General) affecting versions 26.7.0-26.7.1. A difficult-to-exploit network attack via TCP allows an unauthenticated attacker to cause a hang or repeatable crash (complete DoS) and unauthorized read and modification of some data.

Vulnerability in MySQL Cluster (component: Cluster: General) affects versions 8.0.0-8.0.48, 8.4.0-8.4.11, and 9.7.0-9.7.2. An unauthenticated attacker can take over MySQL Cluster over HTTP with user interaction.

Vulnerability in Oracle's MySQL Cluster product (component: Cluster: NDB Operator). Affected versions are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks can cause a hang or frequently repeatable crash (complete DoS) and unauthorized update, insert or delete access to some data.

Vulnerability in MySQL Cluster (Cluster: NDB Operator component) versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. An unauthenticated attacker with local access can exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all MySQL Cluster data.

Vulnerability in Oracle MySQL's MySQL Cluster product (component: Server: Optimizer). Affected versions are 8.0.0-8.0.47. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the MySQL Cluster.