Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-commonUpgrade mysqlUpgrade mysql-testUpgrade mysql-errmsgUpgrade mecabUpgrade mysql-develUpgrade mecab-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mecab-ipadicUpgrade mysql-server | Feb 21, 2025 | Jan 21, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.3Upgrade to MySQL version 8.0.40Upgrade to MySQL version 9.1.0 | Jan 22, 2025 | Jan 21, 2025 |
| Oracle_linux | — | Upgrade mysqlUpgrade mysql-testUpgrade mysql-errmsgUpgrade mecabUpgrade mecab-develUpgrade mysql-serverUpgrade mysql-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mysql-libsUpgrade mecab-ipadic | Feb 25, 2025 | Jan 21, 2025 |
| Redhat_linux | — | Upgrade mecab-develUpgrade mysql-debugsourceUpgrade mysql-libs-debuginfoUpgrade mecab-debugsourceUpgrade mysql-develUpgrade mecab-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql-serverUpgrade mecabUpgrade mysql-testUpgrade mysql-test-debuginfoUpgrade mysql-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysqlUpgrade mysql-libsUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mysql-commonUpgrade mysql-server-debuginfo | Feb 20, 2025 | Jan 21, 2025 |
| Rocky_linux | — | Upgrade mecab-debugsourceUpgrade mysqlUpgrade mysql-debuginfoUpgrade mysql-develUpgrade mecab-develUpgrade mysql-debugsourceUpgrade mysql-libs-debuginfoUpgrade mysql-commonUpgrade mysql-errmsgUpgrade mysql-server-debuginfoUpgrade mecabUpgrade mecab-ipadicUpgrade mysql-devel-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mecab-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-serverUpgrade mysql-libsUpgrade mysql-test | Feb 27, 2025 | Jan 21, 2025 |
| Ubuntu | — | Upgrade mysql-8.0 | Jan 24, 2025 | Jan 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub