UBUNTU-CVE-2026-60191

MEDIUM5.5

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Clus

Published Jul 21, 2026

Modified 2 weeks ago

Fix available

Details

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected Packages(11 packages)

mysql-5.5

Ubuntu 14.04 LTS

Affected versions:

5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35+dfsg-1ubuntu15.5.35-0ubuntu15.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.1+15 more

mariadb-10.0

Ubuntu 16.04 LTS

Affected versions:

10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-710.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.110.0.29-0ubuntu0.16.04.110.0.31-0ubuntu0.16.04.2+4 more

percona-server-5.6

Ubuntu 16.04 LTS

Affected versions:

5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1

percona-xtradb-cluster-5.6

Ubuntu 16.04 LTS

Affected versions:

5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2

mariadb-10.1

Ubuntu 18.04 LTS

Affected versions:

10.1.25-11:10.1.29-61:10.1.34-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.21:10.1.40-0ubuntu0.18.04.11:10.1.41-0ubuntu0.18.04.11:10.1.43-0ubuntu0.18.04.11:10.1.44-0ubuntu0.18.04.11:10.1.47-0ubuntu0.18.04.1+1 more

mariadb-10.3

Ubuntu 20.04 LTS

Affected versions:

1:10.3.17-11:10.3.18-11:10.3.19-11:10.3.21-21:10.3.22-11:10.3.22-1ubuntu11:10.3.25-0ubuntu0.20.04.11:10.3.29-0ubuntu0.20.04.11:10.3.30-0ubuntu0.20.04.11:10.3.31-0ubuntu0.20.04.1+5 more

mysql-8.0

Ubuntu 22.04 LTS

Fixed in:

8.0.46-0ubuntu0.22.04.4

mysql-8.0

Ubuntu 24.04 LTS

Fixed in:

8.0.46-0ubuntu0.24.04.4

mysql-8.4

Ubuntu 26.04 LTS

Fixed in:

8.4.11-0ubuntu0.26.04.1

mysql-5.7

Ubuntu Pro 16.04 LTS

Affected versions:

5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.15.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.2+26 more

References

REPORT

https://ubuntu.com/security/CVE-2026-60191

ADVISORY

https://ubuntu.com/security/notices/USN-8700-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2026-60191

REPORT

https://www.oracle.com/security-alerts/cpujul2026.html

CVSS Analysis

CVSS v3.1

Exploitability