Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-commonUpgrade rapidjson-develUpgrade mecab-ipadic-EUCJPUpgrade rapidjson-docUpgrade mecab-ipadicUpgrade mysql-libsUpgrade mysql-errmsgUpgrade mecabUpgrade mysql-test-dataUpgrade mecab-develUpgrade mysql-develUpgrade mysqlUpgrade mysql-testUpgrade mysql-server | Sep 19, 2025 | Sep 17, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.5Upgrade to MySQL version 8.0.42Upgrade to MySQL version 9.3.0 | Apr 16, 2025 | Apr 15, 2025 |
| Oracle_linux | — | Upgrade mecabUpgrade mecab-ipadicUpgrade mysql-testUpgrade mysql-errmsgUpgrade rapidjson-docUpgrade mysql8.4-develUpgrade mysqlUpgrade mysql8.4Upgrade mysql-test-dataUpgrade mysql8.4-testUpgrade mysql8.4-serverUpgrade mysql8.4-commonUpgrade mysql8.4-libsUpgrade mysql-develUpgrade rapidjson-develUpgrade mysql8.4-test-dataUpgrade mysql8.4-errmsgUpgrade mysql-libsUpgrade mysql-serverUpgrade mysql-commonUpgrade mecab-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-selinux | Sep 15, 2025 | Apr 15, 2025 |
| Redhat_linux | — | Upgrade mysql8.4-serverUpgrade mysql-devel-debuginfoUpgrade mysql-testUpgrade mysql8.4-testUpgrade mysqlUpgrade mysql-develUpgrade mysql8.4-debuginfoUpgrade mysql-serverUpgrade mysql-server-debuginfoUpgrade mysql8.4-commonUpgrade mysql-debugsourceUpgrade mecabUpgrade mysql-test-dataUpgrade mysql-selinuxUpgrade mecab-develUpgrade mysql-test-debuginfoUpgrade mysql8.4-test-dataUpgrade mecab-ipadicUpgrade mysql8.4-debugsourceUpgrade mysql8.4-devel-debuginfoUpgrade rapidjson-docUpgrade mysql8.4-libs-debuginfoUpgrade mysql8.4-errmsgUpgrade mysql8.4-test-debuginfoUpgrade mysql8.4Upgrade mysql-commonUpgrade mysql8.4-develUpgrade mysql-debuginfoUpgrade mecab-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecab-debugsourceUpgrade mysql-libsUpgrade mysql-errmsgUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-libsUpgrade rapidjson-develUpgrade mysql8.4-server-debuginfo | Jul 9, 2025 | Apr 15, 2025 |
| Rocky_linux | — | Upgrade mysql-errmsgUpgrade mysql-develUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-debuginfoUpgrade mysql8.4Upgrade mysql8.4-libs-debuginfoUpgrade mysql8.4-devel-debuginfoUpgrade mysql-debugsourceUpgrade mysqlUpgrade mecab-ipadicUpgrade mecab-develUpgrade mysql-server-debuginfoUpgrade mecab-debugsourceUpgrade mecabUpgrade mecab-debuginfoUpgrade mysql8.4-debugsourceUpgrade mysql-serverUpgrade mysql-test-debuginfoUpgrade mysql8.4-libsUpgrade mysql8.4-server-debuginfoUpgrade mysql8.4-serverUpgrade mysql-testUpgrade mysql8.4-develUpgrade mysql-libsUpgrade mysql-devel-debuginfoUpgrade mysql8.4-testUpgrade mysql8.4-test-debuginfoUpgrade mysql-commonUpgrade mysql-debuginfoUpgrade mysql-libs-debuginfo | Feb 5, 2026 | Dec 2, 2025 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server | May 6, 2025 | Apr 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Apr 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub