REDHAT-BUG-2359945: Medium severity Oracle MySQL Server vulnerability

Q: Who can exploit this issue?

An attacker needs high privileges on the MySQL Server and network access through one of multiple supported protocols. No user interaction is required.

Q: What is the impact of successful exploitation?

Successful exploitation can cause MySQL Server to hang or repeatedly crash, resulting in a complete denial of service. The stated CVSS impacts do not include confidentiality or integrity loss.

Q: Which MySQL Server versions are affected?

Affected supported versions are 8.0.0 through 8.0.41, 8.4.0 through 8.4.4, and 9.0.0 through 9.2.0.

Published Apr 15, 2025

Updated

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected Software

3 affected components

Oracle MySQL Server>=8.0.0<=8.0.41

Oracle MySQL Server>=8.4.0<=8.4.4

Oracle MySQL Server>=9.0.0<=9.2.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Compensating control
Mitigate network-based exploitation by restricting access to the MySQL Server network ports so only trusted clients can reach the MySQL Server.

Event History

Apr 15, 2025

Data Sourced

via Red Hat·09:03 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

An attacker needs high privileges on the MySQL Server and network access through one of multiple supported protocols. No user interaction is required.

What is the impact of successful exploitation?

Successful exploitation can cause MySQL Server to hang or repeatedly crash, resulting in a complete denial of service. The stated CVSS impacts do not include confidentiality or integrity loss.

Which MySQL Server versions are affected?

Affected supported versions are 8.0.0 through 8.0.41, 8.4.0 through 8.4.4, and 9.0.0 through 9.2.0.

REDHAT-BUG-2359945: Medium severity Oracle MySQL Server vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which MySQL Server versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which MySQL Server versions are affected?