PT-2025-42959 · Oracle+7 · Oracle Mysql+7

Published 2025-10-21 · Updated 2026-02-03 · CVE-2025-53062

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.43 Oracle MySQL versions 8.4.0 through 8.4.6 Oracle MySQL versions 9.0.0 through 9.4.0

Description An issue exists in the InnoDB component of Oracle MySQL Server that allows a high-privileged attacker with network access to cause a denial-of-service condition, potentially leading to a hang or frequent crashes of the MySQL Server. Successful exploitation can result in an unauthorized ability to cause a complete denial-of-service.

Recommendations Update Oracle MySQL to a version later than 8.0.43 Update Oracle MySQL to a version later than 8.4.6 Update Oracle MySQL to a version later than 9.4.0

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2025:23008

ALSA-2025:23109

ALSA-2025:23111

ALSA-2025:23134

ALSA-2025:23137

AZL-68646

BDU:2025-15871

CVE-2025-53062

OESA-2025-2540

OESA-2025-2541

OESA-2025-2542

OESA-2025-2543

OESA-2025-2544

OESA-2025-2644

USN-7873-1

USN-8006-1

Affected Products

Almalinux

Centos

Linuxmint

Mysql Server

Oracle Mysql

Red Hat

Rocky Linux

Ubuntu

References · 81

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-53062 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7873-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2025-23137.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21941 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-68646 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53053 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8006-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-23109.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-23109.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:23111 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53040 · Security Note
• https://ubuntu.com/security/CVE-2025-53069 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:23008 · Vendor Advisory