PT-2025-29651 · Oracle+7 · Mysql 9.0+9

CVE-2025-50098

·

Publicado

2025-07-15

·

Atualizado

2025-10-06

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0
Description This issue affects the Optimizer component of Oracle MySQL Server. A highly privileged attacker with network access via multiple protocols can compromise MySQL Server, potentially resulting in a partial denial of service.
Recommendations Oracle MySQL versions prior to 8.0.43 should be updated. Oracle MySQL versions prior to 8.4.6 should be updated. Oracle MySQL versions prior to 9.3.1 should be updated.

Exploit

Correção

DoS

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

ALSA-2025:15699
ALSA-2025:16046
ALSA-2025:16086
ALSA-2025:16861
AZL-65279
AZL-65483
BDU:2025-08674
CESA-2025_16861
CVE-2025-50098
INFSA-2025_16046
INFSA-2025_16086
INFSA-2025_16861
OESA-2025-2085
RHSA-2025:16861
RHSA-2025_16046
RHSA-2025_16086
RHSA-2025_16861
USN-7691-1
USN-7691-2

Produtos afetados

Almalinux
Centos
Linuxmint
Mysql 8.0
Mysql 8.4
Mysql 9.0
Mysql Server
Red Hat
Rocky Linux
Ubuntu