CVE-2025-53045

EUVD-2025-35289

21.10.2025, 20:20

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.9 MEDIUM	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
oracle	CNA	4.9 MEDIUM	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 19%

Affected Products (NVD)

Vendor	Product	Version
oracle	mysql_server	8.0.0 ≤ 𝑥 ≤ 8.0.43
oracle	mysql_server	8.4.0 ≤ 𝑥 ≤ 8.4.6
oracle	mysql_server	9.0.0 ≤ 𝑥 ≤ 9.4.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

mysql-8.0

sid	8.0.45-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

mysql-8.0

focal	Fixed 8.0.45-0ubuntu0.20.04.1+esm2 released
jammy	Fixed 8.0.44-0ubuntu0.22.04.1 released
noble	Fixed 8.0.44-0ubuntu0.24.04.1 released
plucky	dne
questing	dne

mysql-8.4

jammy	dne
noble	dne
plucky	Fixed 8.4.7-0ubuntu0.25.04.1 released
questing	Fixed 8.4.7-0ubuntu0.25.10.2 released

mysql-5.5

jammy	dne
noble	dne
plucky	dne
questing	dne
trusty	ignored

mysql-5.7

bionic	ignored
jammy	dne
noble	dne
plucky	dne
questing	dne
xenial	ignored

mariadb

jammy	dne
noble	not-affected
plucky	not-affected
questing	not-affected

mariadb-10.0

jammy	dne
noble	dne
plucky	dne
questing	dne
xenial	not-affected

mariadb-10.1

bionic	not-affected
jammy	dne
noble	dne
plucky	dne
questing	dne

mariadb-10.3

focal	ignored
jammy	dne
noble	dne
plucky	dne
questing	dne

mariadb-10.6

jammy	not-affected
noble	dne
plucky	dne
questing	dne

percona-xtradb-cluster-5.6

jammy	dne
noble	dne
plucky	dne
questing	dne
xenial	needs-triage

percona-server-5.6

jammy	dne
noble	dne
plucky	dne
questing	dne
xenial	needs-triage

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

https://www.oracle.com/security-alerts/cpuoct2025.html