CVE-2025-21529: Medium severity oracle mysql vulnerability
Last updated 30 January 2025
Other sources
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
— Debian
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21529?
CVE-2025-21529 is classified as an easily exploitable vulnerability that can be significantly detrimental if exploited by a high-privileged attacker.
How do I fix CVE-2025-21529?
To remediate CVE-2025-21529, upgrade MySQL Server to version 8.0.41-2 or newer.
Which versions of MySQL Server are affected by CVE-2025-21529?
CVE-2025-21529 affects MySQL Server versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior.
Who is affected by CVE-2025-21529?
Organizations using Oracle MySQL versions that are 8.0.40 or older, 8.4.3 or older, and 9.1.0 or older are affected by CVE-2025-21529.
What component of MySQL Server does CVE-2025-21529 impact?
CVE-2025-21529 impacts the Information Schema component of Oracle MySQL Server.