PT-2025-29641 · Oracle+5 · Oracle Mysql+5

Published 2025-07-15 · Updated 2025-09-30 · CVE-2025-50088

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.41 Oracle MySQL versions 8.4.0 through 8.4.4 Oracle MySQL versions 9.0.0 through 9.2.0

Description A vulnerability exists within the InnoDB component of Oracle MySQL Server that allows a high-privileged attacker with network access to cause a denial-of-service (DOS) condition, potentially leading to a hang or frequent crashes of the MySQL Server. This issue is easily exploitable through multiple protocols.

Recommendations Oracle MySQL versions prior to 8.0.42 are affected. Oracle MySQL versions prior to 8.4.5 are affected. Oracle MySQL versions prior to 9.2.1 are affected.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2025:15699

ALSA-2025:16046

ALSA-2025:16086

ALSA-2025:16861

BDU:2025-08702

CESA-2025_16861

CVE-2025-50088

INFSA-2025_16046

INFSA-2025_16086

INFSA-2025_16861

RHSA-2025:16861

RHSA-2025_16046

RHSA-2025_16086

RHSA-2025_16861

Affected Products

Almalinux

Centos

Mysql Server

Oracle Mysql

Red Hat

Rocky Linux

References · 132

• https://linux.oracle.com/errata/ELSA-2025-16861.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-16086.html · Vendor Advisory
• https://oracle.com/security-alerts/cpujul2025.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:15699 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-50088 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-50088 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-16046.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08702 · Security Note
• https://osv.dev/vulnerability/ALSA-2025:16046 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-16086.html · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2025-15699.html · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2025-16861.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:16861 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:16086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50088 · Security Note