PT-2025-29657 · Oracle+7 · Mysql 9.3.0+12

CVE-2025-50104

·

Publicado

2025-07-15

·

Atualizado

2025-10-06

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0
Description This issue affects the Server: DDL component of Oracle MySQL Server. A high-privileged attacker with network access via multiple protocols can compromise the server, potentially resulting in a partial denial of service.
Recommendations Oracle MySQL versions prior to 8.0.43 should be used. Oracle MySQL versions prior to 8.4.6 should be used. Oracle MySQL versions prior to 9.3.1 should be used.

Exploit

Correção

DoS

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

ALSA-2025:15699
ALSA-2025:16046
ALSA-2025:16086
ALSA-2025:16861
AZL-65276
AZL-65498
BDU:2025-08671
CESA-2025_16861
CVE-2025-50104
INFSA-2025_16046
INFSA-2025_16086
INFSA-2025_16861
OESA-2025-2085
RHSA-2025:16861
RHSA-2025_16046
RHSA-2025_16086
RHSA-2025_16861
USN-7691-1
USN-7691-2

Produtos afetados

Almalinux
Centos
Linuxmint
Mysql 8.0.0
Mysql 8.0.42
Mysql 8.4.0
Mysql 8.4.5
Mysql 9.0.0
Mysql 9.3.0
Mysql Server
Red Hat
Rocky Linux
Ubuntu