Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-commonUpgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-develUpgrade rapidjson-develUpgrade mecab-ipadicUpgrade mecab-develUpgrade mysql-libsUpgrade mysql-testUpgrade mysqlUpgrade mysql-errmsgUpgrade mecabUpgrade mysql-test-dataUpgrade rapidjson-doc | Sep 19, 2025 | Sep 17, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.42Upgrade to MySQL version 8.4.5Upgrade to MySQL version 9.3.0 | Apr 16, 2025 | Apr 15, 2025 |
| Oracle_linux | — | Upgrade mysqlUpgrade rapidjson-docUpgrade mysql8.4-testUpgrade mysql8.4-develUpgrade mysql-testUpgrade mysql8.4Upgrade mysql-selinuxUpgrade mysql-commonUpgrade mecabUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade mysql-develUpgrade mysql-libsUpgrade mysql8.4-libsUpgrade rapidjson-develUpgrade mecab-develUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-errmsgUpgrade mysql-serverUpgrade mysql8.4-commonUpgrade mysql8.4-serverUpgrade mysql8.4-test-dataUpgrade mysql-test-data | Sep 15, 2025 | Apr 15, 2025 |
| Redhat_linux | — | Upgrade mecabUpgrade mysql-debugsourceUpgrade mysql-testUpgrade mysql8.4-errmsgUpgrade mysql-selinuxUpgrade mysql-test-debuginfoUpgrade mysql8.4-devel-debuginfoUpgrade mysql8.4-server-debuginfoUpgrade mecab-debuginfoUpgrade mysql8.4-debuginfoUpgrade rapidjson-docUpgrade mysql-devel-debuginfoUpgrade mysql8.4-debugsourceUpgrade mysql8.4-serverUpgrade mysqlUpgrade mysql-serverUpgrade mysql-errmsgUpgrade mysql-libsUpgrade mysql-test-dataUpgrade mysql8.4-libsUpgrade mysql-develUpgrade mysql8.4-test-dataUpgrade mysql8.4Upgrade mysql-server-debuginfoUpgrade mysql8.4-develUpgrade mecab-develUpgrade mysql8.4-testUpgrade mysql8.4-commonUpgrade mecab-ipadicUpgrade mysql8.4-test-debuginfoUpgrade mysql8.4-libs-debuginfoUpgrade mysql-commonUpgrade mecab-debugsourceUpgrade mysql-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-libs-debuginfoUpgrade rapidjson-devel | Jul 9, 2025 | Apr 15, 2025 |
| Rocky_linux | — | Upgrade mysql-server-debuginfoUpgrade mysql-testUpgrade mysql-commonUpgrade mysql8.4-develUpgrade mysqlUpgrade mysql-errmsgUpgrade mysql-libs-debuginfoUpgrade mysql8.4-devel-debuginfoUpgrade mecabUpgrade mysql8.4-libs-debuginfoUpgrade mysql-debuginfoUpgrade mecab-ipadicUpgrade mysql8.4-test-debuginfoUpgrade mysql-develUpgrade mysql8.4-debuginfoUpgrade mysql8.4Upgrade mysql8.4-server-debuginfoUpgrade mysql-test-debuginfoUpgrade mecab-debuginfoUpgrade mysql-devel-debuginfoUpgrade mecab-debugsourceUpgrade mysql8.4-libsUpgrade mecab-develUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-debugsourceUpgrade mysql8.4-serverUpgrade mysql-debugsourceUpgrade mysql8.4-testUpgrade mysql-serverUpgrade mysql-libs | Feb 5, 2026 | Dec 2, 2025 |
| Ubuntu | — | Upgrade mysql-serverUpgrade mysql-server-8.0 | May 6, 2025 | Apr 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Apr 15, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub