PT-2025-16404 · Oracle+8 · Mysql Server+7

CVE-2025-21579

·

Published

2025-04-15

·

Updated

2025-09-30

CVSS v2.0

6.8

Medium

VectorAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.41 Oracle MySQL versions 8.4.0 through 8.4.4 Oracle MySQL versions 9.0.0 through 9.2.0
Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of the MySQL Server.
Recommendations For versions 8.0.0 through 8.0.41, update to a version outside of this range to resolve the issue. For versions 8.4.0 through 8.4.4, update to a version outside of this range to resolve the issue. For versions 9.0.0 through 9.2.0, update to a version outside of this range to resolve the issue.

Exploit

Fix

DoS

Resource Exhaustion

Incorrect Permission

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025:15699
ALSA-2025:16046
ALSA-2025:16086
ALSA-2025:16861
ALT-PU-2025-7012
ALT-PU-2025-7414
AZL-62083
AZL-62157
BDU:2025-05060
CESA-2025_16861
CVE-2025-21579
INFSA-2025_16046
INFSA-2025_16086
INFSA-2025_16861
OESA-2025-1454
RHSA-2025:16861
RHSA-2025_16046
RHSA-2025_16086
RHSA-2025_16861
USN-7479-1

Affected Products

Alt Linux
Almalinux
Centos
Linuxmint
Mysql Server
Red Hat
Rocky Linux
Ubuntu