Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-serverUpgrade rapidjson-develUpgrade mecab-develUpgrade mecab-ipadicUpgrade mysql-develUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mecabUpgrade mysql-test-dataUpgrade rapidjson-docUpgrade mysql-errmsgUpgrade mysqlUpgrade mysql-test | Sep 19, 2025 | Sep 17, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.5Upgrade to MySQL version 8.0.42Upgrade to MySQL version 9.3.0 | Apr 16, 2025 | Apr 15, 2025 |
| Oracle_linux | — | Upgrade rapidjson-docUpgrade mysqlUpgrade mysql8.4-testUpgrade mysql8.4-develUpgrade mysql-testUpgrade mysql8.4Upgrade mecab-ipadicUpgrade mecabUpgrade mysql-errmsgUpgrade mysql-commonUpgrade mysql-selinuxUpgrade rapidjson-develUpgrade mysql8.4-serverUpgrade mysql8.4-libsUpgrade mysql-libsUpgrade mysql-develUpgrade mysql8.4-commonUpgrade mysql-test-dataUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-test-dataUpgrade mysql8.4-errmsgUpgrade mysql-serverUpgrade mecab-devel | Sep 15, 2025 | Apr 15, 2025 |
| Redhat_linux | — | Upgrade mysql8.4-test-dataUpgrade mecab-develUpgrade mysql8.4-testUpgrade mysql8.4-test-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-debuginfoUpgrade mysql-develUpgrade rapidjson-develUpgrade mysql8.4-libs-debuginfoUpgrade mecab-ipadicUpgrade mecab-debugsourceUpgrade mysql-libs-debuginfoUpgrade mysql8.4-develUpgrade mysql-commonUpgrade mysql8.4-libsUpgrade mysql8.4-commonUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4Upgrade mecabUpgrade rapidjson-docUpgrade mysql8.4-errmsgUpgrade mysql-serverUpgrade mysql-devel-debuginfoUpgrade mysql-testUpgrade mysql8.4-devel-debuginfoUpgrade mysql8.4-server-debuginfoUpgrade mysql-debugsourceUpgrade mysql8.4-debuginfoUpgrade mysql8.4-debugsourceUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade mysqlUpgrade mysql-test-dataUpgrade mysql-errmsgUpgrade mysql-selinuxUpgrade mysql8.4-serverUpgrade mecab-debuginfo | Jul 9, 2025 | Apr 15, 2025 |
| Rocky_linux | — | Upgrade mecabUpgrade mysql-debuginfoUpgrade mecab-ipadicUpgrade mysql8.4-devel-debuginfoUpgrade mysql8.4-libs-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-testUpgrade mysql-libs-debuginfoUpgrade mysql8.4-test-debuginfoUpgrade mysql-errmsgUpgrade mysql8.4-develUpgrade mysqlUpgrade mysql-commonUpgrade mecab-debugsourceUpgrade mysql8.4-server-debuginfoUpgrade mysql-serverUpgrade mysql-libsUpgrade mysql-devel-debuginfoUpgrade mecab-debuginfoUpgrade mysql8.4-serverUpgrade mysql-debugsourceUpgrade mysql8.4-libsUpgrade mecab-develUpgrade mysql8.4-testUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-debugsourceUpgrade mysql8.4Upgrade mysql8.4-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-devel | Feb 5, 2026 | Dec 2, 2025 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server | May 6, 2025 | Apr 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Apr 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub