Every CVE Search/ Get API key

CVE-2025-21500

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

6.5 MediumFix available

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.00%Up 1.0 points since Jan 22, 2025
90%50%10%1%

What each source reports

CVE List Score used 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2025-21500
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
EUVDEUVD-2025-2489 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2025-2489
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-23cj-6mpm-r98j 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-23cj-6mpm-r98j
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
NVD 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2025-21500
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSV 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2025-21500
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1103 6.5

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2025-21490)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2025-21491)

Vulnerability in the MySQL Enterprise Firewall product of Oracle MySQL (component: Firewall). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Firewall. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Enterprise Firewall. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2025-21495)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2025-21497)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).(CVE-2025-21500)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector:…

Record
OESA-2025-1103
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 12 moreShow less
OSVRHSA-2025:1671 7.5

Red Hat Security Advisory: mysql security update

Record
RHSA-2025:1671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1673 7.5

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2025:1673
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:1671 7.5

Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan…

Record
RLSA-2025:1671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-21500 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
UBUNTU-CVE-2025-21500
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:1671 No score

Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  • krb5: GSS message token handling (CVE-2024-37371)
  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  • curl: curl netrc password leak (CVE-2024-11053)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  • mysql:…
Record
ALSA-2025:1671
Updated
2026-11-02
OSVALSA-2025:1673 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  • krb5: GSS message token handling (CVE-2024-37371)
  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  • curl: curl netrc password leak (CVE-2024-11053)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  • mysql:…
Record
ALSA-2025:1673
Updated
2026-11-02
OSVCLSA-2025-1740823577 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1740823577
Updated
2026-11-02
OSVCLSA-2025-1740824456 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1740824456
Updated
2026-11-02
OSVCLSA-2025-1741074282 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1741074282
Updated
2026-11-02
OSVCLSA-2025-1741637440 No score

mysql: Fix of 23 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-21101 CVE-2025-21559 CVE-2025-21555 CVE-2025-21546 CVE-2025-21543 CVE-2025-21540 CVE-2025-21531 CVE-2025-21529 CVE-2025-21523 CVE-2025-21522 CVE-2025-21520 CVE-2025-21519 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504 CVE-2025-21503 CVE-2025-21501 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491 CVE-2025-21490 CVE-2024-11053 CVE-2024-7264
Record
CLSA-2025-1741637440
Updated
2026-11-02
OSVRLSA-2025:1673 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan…

Record
RLSA-2025:1673
Updated
2026-11-02
OSVUSN-7245-1 No score

mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.41 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-41.html https://www.oracle.com/security-alerts/cpujan2025.html

Record
USN-7245-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mysql
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-common
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-devel
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-errmsg
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-libs
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-server
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-test
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mecab
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
mecab
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
Show 96 moreShow less
Affected packages
PackageAffectedFixed
mecab-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 49 CVEs
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 49 CVEs
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mysql
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-common
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-errmsg
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-libs
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-server
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-test
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-common
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-server
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-test
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-common
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-server
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-test
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-common
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-devel
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-errmsg
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-libs
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-server
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-test
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-common
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-errmsg
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-server
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-test
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql
openEuler:22.03-LTS-SP3
From an advisory covering 20 CVEs
 before 8.0.41-1.oe2203sp3
8.0.41-1.oe2203sp3
mysql
openEuler:22.03-LTS-SP4
From an advisory covering 20 CVEs
 before 8.0.41-1.oe2203sp4
8.0.41-1.oe2203sp4
mysql
openEuler:24.03-LTS
From an advisory covering 20 CVEs
 before 8.0.41-1.oe2403sp1
8.0.41-1.oe2403sp1
mysql
openEuler:24.03-LTS-SP1
From an advisory covering 20 CVEs
 before 8.0.41-1.oe2403sp1
8.0.41-1.oe2403sp1
mysql
openEuler:20.03-LTS-SP4
From an advisory covering 20 CVEs
 before 8.0.41-1.oe2003sp4
8.0.41-1.oe2003sp4
mysql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-errmsg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql
Rocky Linux:9
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mecab
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+1676+9b4b6e24
0:0.996-2.module+el8.10.0+1676+9b4b6e24
mecab-ipadic
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
mysql
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
mysql-5.7
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 31 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm25.7.40-0ubuntu0.16.04.1+esm15.7.41-0ubuntu0.16.04.1+esm15.7.42-0ubuntu0.16.04.1+esm15.7.43-0ubuntu0.16.04.1+esm15.7.44-0ubuntu0.16.04.1+esm1
 None known
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mysql-5.7
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 23 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.25.7.40-0ubuntu0.18.04.15.7.41-0ubuntu0.18.04.15.7.42-0ubuntu0.18.04.15.7.43-0ubuntu0.18.04.1+esm15.7.44-0ubuntu0.18.04.1+esm1
 None known
mysql-8.0
Ubuntu:20.04:LTS
 before 8.0.41-0ubuntu0.20.04.1, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 31 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.18.0.31-0ubuntu0.20.04.28.0.32-0buntu0.20.04.18.0.32-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.18.0.33-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.48.0.34-0ubuntu0.20.04.18.0.35-0ubuntu0.20.04.18.0.36-0ubuntu0.20.04.18.0.37-0ubuntu0.20.04.38.0.39-0ubuntu0.20.04.18.0.40-0ubuntu0.20.04.1
8.0.41-0ubuntu0.20.04.1
mysql-8.0
Ubuntu:22.04:LTS
 before 8.0.41-0ubuntu0.22.04.1, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1
Show 15 moreShow less
8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.18.0.32-0buntu0.22.04.18.0.32-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.18.0.33-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.48.0.34-0ubuntu0.22.04.18.0.35-0ubuntu0.22.04.18.0.36-0ubuntu0.22.04.18.0.37-0ubuntu0.22.04.38.0.39-0ubuntu0.22.04.18.0.40-0ubuntu0.22.04.1
8.0.41-0ubuntu0.22.04.1
mysql-8.0
Ubuntu:24.04:LTS
 before 8.0.41-0ubuntu0.24.04.1, plus listed versions
8.0.34-1ubuntu18.0.35-1ubuntu18.0.35-1ubuntu28.0.36-18.0.36-2ubuntu1
Show 6 moreShow less
8.0.36-2ubuntu28.0.36-2ubuntu38.0.37-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.28.0.40-0ubuntu0.24.04.1
8.0.41-0ubuntu0.24.04.1
mysql-8.0
Ubuntu:20.04:LTS
From an advisory covering 16 CVEs
 before 8.0.41-0ubuntu0.20.04.1, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 31 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.18.0.31-0ubuntu0.20.04.28.0.32-0buntu0.20.04.18.0.32-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.18.0.33-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.48.0.34-0ubuntu0.20.04.18.0.35-0ubuntu0.20.04.18.0.36-0ubuntu0.20.04.18.0.37-0ubuntu0.20.04.38.0.39-0ubuntu0.20.04.18.0.40-0ubuntu0.20.04.1
8.0.41-0ubuntu0.20.04.1
mysql-8.0
Ubuntu:22.04:LTS
From an advisory covering 16 CVEs
 before 8.0.41-0ubuntu0.22.04.1, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1
Show 15 moreShow less
8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.18.0.32-0buntu0.22.04.18.0.32-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.18.0.33-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.48.0.34-0ubuntu0.22.04.18.0.35-0ubuntu0.22.04.18.0.36-0ubuntu0.22.04.18.0.37-0ubuntu0.22.04.38.0.39-0ubuntu0.22.04.18.0.40-0ubuntu0.22.04.1
8.0.41-0ubuntu0.22.04.1
mysql-8.0
Ubuntu:24.04:LTS
From an advisory covering 16 CVEs
 before 8.0.41-0ubuntu0.24.04.1, plus listed versions
8.0.34-1ubuntu18.0.35-1ubuntu18.0.35-1ubuntu28.0.36-18.0.36-2ubuntu1
Show 6 moreShow less
8.0.36-2ubuntu28.0.36-2ubuntu38.0.37-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.28.0.40-0ubuntu0.24.04.1
8.0.41-0ubuntu0.24.04.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21500 is a medium vulnerability (CVSS 6.5) in Oracle Mysql Server, published January 21, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.00%, the 63rd percentile. Fixed in mysql-8.0 8.0.41-0ubuntu0.20.04.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 87 references and the rest of 5 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open