Denial of Service Vulnerability in Oracle MySQL Server
CVE-2025-30683

4.9MEDIUM

Key Information:

Vendor
Oracle
Status
Mysql Server
Vendor
CVE Published:
15 April 2025

Summary

A vulnerability exists within the MySQL Server component of Oracle MySQL that could be exploited by high privileged attackers with network access. This issue affects several versions of MySQL Server, allowing these attackers to potentially crash the server or cause continuous service disruptions, resulting in denial of service conditions. The risk arises from the server's replication functionality, making it crucial for users to apply relevant security measures and updates to mitigate this vulnerability.

Affected Version(s)

MySQL Server 8.0.0 <= 8.0.41

MySQL Server 8.4.0 <= 8.4.4

MySQL Server 9.0.0 <= 9.2.0

References

https://www.oracle.com/security-alerts/cpuapr2025.html
vendor-advisory

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.