PT-2025-29653 · Oracle+7 · Mysql 9.3.0+12

Published 2025-07-15 · Updated 2025-10-06 · CVE-2025-50100

Positive Technologies (AI Summary)

CVSS v3.1

2.2

Low

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0

Description A difficult-to-exploit issue exists in the Server: Thread Pooling component of Oracle MySQL. A high-privileged attacker with network access via multiple protocols can compromise MySQL Server, potentially causing a partial denial of service.

Recommendations Oracle MySQL versions prior to 8.0.43 should be updated. Oracle MySQL versions prior to 8.4.6 should be updated. Oracle MySQL versions prior to 9.3.1 should be updated.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2025:15699

ALSA-2025:16046

ALSA-2025:16086

ALSA-2025:16861

AZL-65306

AZL-65489

BDU:2025-08672

CESA-2025_16861

CVE-2025-50100

INFSA-2025_16046

INFSA-2025_16086

INFSA-2025_16861

OESA-2025-2085

RHSA-2025:16861

RHSA-2025_16046

RHSA-2025_16086

RHSA-2025_16861

USN-7691-1

USN-7691-2

Affected Products

Almalinux

Centos

Linuxmint

Mysql Server

Mysql 8.0.0

Mysql 8.0.42

Mysql 8.4.0

Mysql 8.4.5

Mysql 9.0.0

Mysql 9.3.0

Red Hat

Rocky Linux

Ubuntu

References · 189

• https://ubuntu.com/security/CVE-2025-50091 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-16861.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-16086.html · Vendor Advisory
• https://oracle.com/security-alerts/cpujul2025.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50085 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50086 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50068 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50100 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-50083 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:15699 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50097 · Security Note
• https://ubuntu.com/security/notices/USN-7691-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-50100 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-50093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53023 · Security Note