PT-2025-16429

CVE-2025-30695

·

Published

2025-04-15

·

Updated

2025-09-30

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0
Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server, as well as unauthorized update, insert, or delete access to some of MySQL Server's accessible data.
Recommendations For versions 8.0.0 through 8.0.41, update to a version outside of this range to resolve the issue. For versions 8.4.0 through 8.4.4, update to a version outside of this range to resolve the issue. For versions 9.0.0 through 9.2.0, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting network access to the MySQL Server to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025:15699
ALSA-2025:16046
ALSA-2025:16086
ALSA-2025:16861
ALT-PU-2025-7012
ALT-PU-2025-7414
AZL-62086
AZL-62135
CESA-2025_16861
INFSA-2025_16046
INFSA-2025_16086
INFSA-2025_16861
OESA-2025-1454
RHSA-2025_16046
RHSA-2025_16086
RHSA-2025:16861
RHSA-2025_16861
USN-7479-1
Found an issue in the description? Have something to add? Feel free to write us 👾