PT-2025-29651 · Oracle+7 · Mysql 8.4+9

Published 2025-07-15 · Updated 2025-10-06 · CVE-2025-50098

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0

Description This issue affects the Optimizer component of Oracle MySQL Server. A highly privileged attacker with network access via multiple protocols can compromise MySQL Server, potentially resulting in a partial denial of service.

Recommendations Oracle MySQL versions prior to 8.0.43 should be updated. Oracle MySQL versions prior to 8.4.6 should be updated. Oracle MySQL versions prior to 9.3.1 should be updated.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2025:15699

ALSA-2025:16046

ALSA-2025:16086

ALSA-2025:16861

AZL-65279

AZL-65483

BDU:2025-08674

CESA-2025_16861

CVE-2025-50098

INFSA-2025_16046

INFSA-2025_16086

INFSA-2025_16861

OESA-2025-2085

RHSA-2025:16861

RHSA-2025_16046

RHSA-2025_16086

RHSA-2025_16861

USN-7691-1

USN-7691-2

Affected Products

Almalinux

Centos

Linuxmint

Mysql 8.0

Mysql 8.4

Mysql 9.0

Mysql Server

Red Hat

Rocky Linux

Ubuntu

References · 189

• https://ubuntu.com/security/CVE-2025-53023 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50087 · Security Note
• https://errata.almalinux.org/8/ALSA-2025-16861.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50092 · Security Note
• https://errata.almalinux.org/10/ALSA-2025-15699.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50078 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50080 · Security Note
• https://ubuntu.com/security/CVE-2025-50096 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50098 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50094 · Security Note
• https://ubuntu.com/security/CVE-2025-50080 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-16086.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-65483 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-50098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50100 · Security Note