CVE-2025-53054

EUVD-2025-35280
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
oracleCNA
5.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Affected Products (NVD)
VendorProductVersion
oraclemysql_server
8.0.0 ≤
𝑥
≤ 8.0.42
oraclemysql_server
8.4.0 ≤
𝑥
≤ 8.4.6
oraclemysql_server
9.0.0 ≤
𝑥
≤ 9.4.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mysql-8.0
sid
8.0.45-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mysql-5.5
jammy
dne
noble
dne
plucky
dne
questing
dne
trusty
ignored
mysql-5.7
bionic
ignored
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
ignored
mysql-8.0
focal
Fixed 8.0.45-0ubuntu0.20.04.1+esm2
released
jammy
Fixed 8.0.44-0ubuntu0.22.04.1
released
noble
Fixed 8.0.44-0ubuntu0.24.04.1
released
plucky
dne
questing
dne
mysql-8.4
jammy
dne
noble
dne
plucky
Fixed 8.4.7-0ubuntu0.25.04.1
released
questing
Fixed 8.4.7-0ubuntu0.25.10.2
released
mariadb
jammy
dne
noble
not-affected
plucky
not-affected
questing
not-affected
mariadb-10.0
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
not-affected
mariadb-10.1
bionic
not-affected
jammy
dne
noble
dne
plucky
dne
questing
dne
mariadb-10.3
focal
ignored
jammy
dne
noble
dne
plucky
dne
questing
dne
mariadb-10.6
jammy
not-affected
noble
dne
plucky
dne
questing
dne
percona-xtradb-cluster-5.6
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
needs-triage
percona-server-5.6
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
needs-triage