PT-2025-29657 · Oracle+7 · Mysql 8.0.0+12

Published

2025-07-15

·

Updated

2025-10-06

·

CVE-2025-50104

CVSS v2.0

4.0

Medium

VectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0
Description This issue affects the Server: DDL component of Oracle MySQL Server. A high-privileged attacker with network access via multiple protocols can compromise the server, potentially resulting in a partial denial of service.
Recommendations Oracle MySQL versions prior to 8.0.43 should be used. Oracle MySQL versions prior to 8.4.6 should be used. Oracle MySQL versions prior to 9.3.1 should be used.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2025:15699
ALSA-2025:16046
ALSA-2025:16086
ALSA-2025:16861
AZL-65276
AZL-65498
BDU:2025-08671
CESA-2025_16861
CVE-2025-50104
INFSA-2025_16046
INFSA-2025_16086
INFSA-2025_16861
OESA-2025-2085
RHSA-2025:16861
RHSA-2025_16046
RHSA-2025_16086
RHSA-2025_16861
USN-7691-1
USN-7691-2

Affected Products

Almalinux
Centos
Linuxmint
Mysql 8.0.0
Mysql 8.0.42
Mysql 8.4.0
Mysql 8.4.5
Mysql 9.0.0
Mysql 9.3.0
Mysql Server
Red Hat
Rocky Linux
Ubuntu