PT-2025-42966 · Oracle+7 · Mysql Server+7

Published 2025-10-21 · Updated 2026-02-03 · CVE-2025-53069

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.43 Oracle MySQL versions 8.4.0 through 8.4.6 Oracle MySQL versions 9.0.0 through 9.4.0

Description An easily exploitable issue exists in the Server: Components Services component of MySQL Server. A high-privileged attacker with network access can compromise the server through multiple protocols. Successful exploitation can lead to a denial-of-service condition, causing a hang or frequent crashes of the MySQL Server.

Recommendations Update Oracle MySQL to a version later than 8.0.43. Update Oracle MySQL to a version later than 8.4.6. Update Oracle MySQL to a version later than 9.4.0.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

ALSA-2025:23008

ALSA-2025:23109

ALSA-2025:23111

ALSA-2025:23134

ALSA-2025:23137

AZL-68651

BDU:2025-15855

CVE-2025-53069

OESA-2025-2540

OESA-2025-2541

OESA-2025-2542

OESA-2025-2543

OESA-2025-2544

OESA-2025-2644

USN-7873-1

USN-8006-1

Affected Products

Almalinux

Centos

Linuxmint

Mysql Server

Oracle Mysql

Red Hat

Rocky Linux

Ubuntu

References · 81

• https://errata.almalinux.org/8/ALSA-2025-23137.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-7873-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21941 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53053 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8006-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-23109.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-23109.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:23111 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53040 · Security Note
• https://ubuntu.com/security/CVE-2025-53069 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:23008 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53042 · Vendor Advisory