PT-2025-42937 · Oracle+7 · Oracle Mysql+7

Published 2025-10-21 · Updated 2026-02-03 · CVE-2025-53040

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.43 Oracle MySQL versions 8.4.0 through 8.4.6 Oracle MySQL versions 9.0.0 through 9.4.0

Description An issue exists in the Server: Optimizer component of Oracle MySQL Server that allows a high-privileged attacker with network access to compromise the server. Successful exploitation can lead to a denial-of-service condition, causing the server to hang or crash repeatedly.

Recommendations Update Oracle MySQL to a version later than 8.0.43. Update Oracle MySQL to a version later than 8.4.6. Update Oracle MySQL to a version later than 9.4.0.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2025:23008

ALSA-2025:23109

ALSA-2025:23111

ALSA-2025:23134

ALSA-2025:23137

AZL-68643

AZL-68693

BDU:2025-13385

CVE-2025-53040

OESA-2025-2540

OESA-2025-2541

OESA-2025-2542

OESA-2025-2543

OESA-2025-2544

OESA-2025-2644

RHSA-2025:23008

RHSA-2025:23109

RHSA-2025:23111

RHSA-2025:23134

RHSA-2025:23137

USN-7873-1

USN-8006-1

Affected Products

Almalinux

Centos

Linuxmint

Mysql Server

Oracle Mysql

Red Hat

Rocky Linux

Ubuntu

References · 82

• https://bdu.fstec.ru/vul/2025-13385 · Security Note
• https://errata.almalinux.org/8/ALSA-2025-23137.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-7873-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21941 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53053 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8006-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-23109.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-68693 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-23109.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:23111 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53040 · Security Note
• https://ubuntu.com/security/CVE-2025-53069 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:23008 · Vendor Advisory