Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mecabUpgrade mysqlUpgrade mysql-test-dataUpgrade mysql-testUpgrade mysql-serverUpgrade mecab-develUpgrade mysql-develUpgrade mecab-ipadicUpgrade mecab-ipadic-EUCJPUpgrade rapidjson-develUpgrade mysql-commonUpgrade mysql-libsUpgrade rapidjson-docUpgrade mysql-errmsg | Sep 19, 2025 | Sep 17, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 9.3.0Upgrade to MySQL version 8.0.42Upgrade to MySQL version 8.4.5 | Apr 16, 2025 | Apr 15, 2025 |
| Oracle_linux | — | Upgrade mysql8.4-serverUpgrade mysql-test-dataUpgrade mysql8.4Upgrade mysqlUpgrade rapidjson-docUpgrade mysql8.4-testUpgrade mysql8.4-develUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mecabUpgrade mysql-testUpgrade mysql8.4-commonUpgrade mysql-serverUpgrade mysql-selinuxUpgrade mysql8.4-errmsgUpgrade mysql-libsUpgrade rapidjson-develUpgrade mysql8.4-test-dataUpgrade mysql-commonUpgrade mecab-ipadic-EUCJPUpgrade mecab-develUpgrade mysql-develUpgrade mysql8.4-libs | Sep 15, 2025 | Apr 15, 2025 |
| Redhat_linux | — | Upgrade mysql-serverUpgrade mecab-ipadicUpgrade mysql-devel-debuginfoUpgrade mysql8.4-serverUpgrade mecabUpgrade mysql-selinuxUpgrade mysql-test-debuginfoUpgrade mysql-testUpgrade mysql8.4-test-dataUpgrade mysql-develUpgrade mecab-develUpgrade mysql-test-dataUpgrade mysql-server-debuginfoUpgrade mysql-debugsourceUpgrade mysql8.4-debuginfoUpgrade mysql8.4-debugsourceUpgrade mysql8.4-testUpgrade mysql8.4-commonUpgrade mysqlUpgrade mysql8.4-devel-debuginfoUpgrade mysql8.4-test-debuginfoUpgrade mysql8.4-errmsgUpgrade mysql-libs-debuginfoUpgrade mysql-commonUpgrade mysql8.4Upgrade mysql-debuginfoUpgrade mysql-libsUpgrade rapidjson-docUpgrade mecab-ipadic-EUCJPUpgrade mecab-debugsourceUpgrade mysql8.4-develUpgrade mysql-errmsgUpgrade mysql8.4-libs-debuginfoUpgrade mysql8.4-libsUpgrade rapidjson-develUpgrade mecab-debuginfoUpgrade mysql8.4-server-debuginfo | Jul 9, 2025 | Apr 15, 2025 |
| Rocky_linux | — | Upgrade mysql-devel-debuginfoUpgrade mysql-testUpgrade mysql-commonUpgrade mysql8.4-serverUpgrade mecab-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade mysql8.4-debugsourceUpgrade mysql8.4-server-debuginfoUpgrade mysql-serverUpgrade mysql-debuginfoUpgrade mysql8.4-testUpgrade mysql8.4-libsUpgrade mysql8.4-test-debuginfoUpgrade mysql8.4-develUpgrade mysql-libs-debuginfoUpgrade mysql-develUpgrade mysql-server-debuginfoUpgrade mysql8.4-libs-debuginfoUpgrade mysql-errmsgUpgrade mysql8.4-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mecab-develUpgrade mysqlUpgrade mecab-ipadicUpgrade mecab-debugsourceUpgrade mecabUpgrade mysql8.4-devel-debuginfoUpgrade mysql-debugsourceUpgrade mysql8.4 | Feb 5, 2026 | Dec 2, 2025 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server | May 6, 2025 | Apr 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Apr 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub