Denial-of-Service Flaw in MySQL Server by Oracle
CVE-2025-53067

4.9MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
21 October 2025

What is CVE-2025-53067?

A vulnerability in Oracle's MySQL Server allows highly privileged attackers with network access to exploit the server's optimizer component. This exploitation can lead to severe disruptions, including the potential for repeated crashes or a hang state of the MySQL Server, effectively resulting in a denial-of-service condition. Affected versions range from 9.0.0 to 9.4.0, making it crucial for organizations using these versions to apply necessary patches and security measures to mitigate the risk.

Affected Version(s)

MySQL Server 9.0.0 <= 9.4.0

References

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.