Every CVE Search/ Get API key

CVE-2025-21504

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

4.9 MediumFix available

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.26%Up 1.2 points since Jan 22, 2025
90%50%10%1%

What each source reports

CVE List Score used 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2025-21504
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
EUVDEUVD-2025-2493 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2025-2493
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-m32h-hfwg-3r8r 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-m32h-hfwg-3r8r
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
NVD 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2025-21504
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSV 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2025-21504
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1671 7.5

Red Hat Security Advisory: mysql security update

Record
RHSA-2025:1671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2025:1673 7.5

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2025:1673
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:1671 7.5

Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan…

Record
RLSA-2025:1671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-21504 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
UBUNTU-CVE-2025-21504
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:1671 No score

Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  • krb5: GSS message token handling (CVE-2024-37371)
  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  • curl: curl netrc password leak (CVE-2024-11053)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  • mysql:…
Record
ALSA-2025:1671
Updated
2026-11-02
OSVALSA-2025:1673 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  • krb5: GSS message token handling (CVE-2024-37371)
  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  • curl: curl netrc password leak (CVE-2024-11053)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  • mysql:…
Record
ALSA-2025:1673
Updated
2026-11-02
OSVCLSA-2025-1740823577 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1740823577
Updated
2026-11-02
OSVCLSA-2025-1740824456 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1740824456
Updated
2026-11-02
OSVCLSA-2025-1741074282 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1741074282
Updated
2026-11-02
OSVCLSA-2025-1741637440 No score

mysql: Fix of 23 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-21101 CVE-2025-21559 CVE-2025-21555 CVE-2025-21546 CVE-2025-21543 CVE-2025-21540 CVE-2025-21531 CVE-2025-21529 CVE-2025-21523 CVE-2025-21522 CVE-2025-21520 CVE-2025-21519 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504 CVE-2025-21503 CVE-2025-21501 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491 CVE-2025-21490 CVE-2024-11053 CVE-2024-7264
Record
CLSA-2025-1741637440
Updated
2026-11-02
OSVRLSA-2025:1673 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan…

Record
RLSA-2025:1673
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mysql
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-common
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-devel
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-errmsg
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-libs
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-server
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-test
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mecab
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
mecab
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
Show 88 moreShow less
Affected packages
PackageAffectedFixed
mecab-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 49 CVEs
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 49 CVEs
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mysql
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-common
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-errmsg
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-libs
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-server
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-test
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-common
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-server
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-test
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-common
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-server
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-test
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-common
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-devel
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-errmsg
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-libs
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-server
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-test
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-common
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-errmsg
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-server
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-test
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-errmsg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql
Rocky Linux:9
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mecab
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+1676+9b4b6e24
0:0.996-2.module+el8.10.0+1676+9b4b6e24
mecab-ipadic
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
mysql
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
mysql-5.7
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 31 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm25.7.40-0ubuntu0.16.04.1+esm15.7.41-0ubuntu0.16.04.1+esm15.7.42-0ubuntu0.16.04.1+esm15.7.43-0ubuntu0.16.04.1+esm15.7.44-0ubuntu0.16.04.1+esm1
 None known
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mysql-5.7
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 23 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.25.7.40-0ubuntu0.18.04.15.7.41-0ubuntu0.18.04.15.7.42-0ubuntu0.18.04.15.7.43-0ubuntu0.18.04.1+esm15.7.44-0ubuntu0.18.04.1+esm1
 None known
mysql-8.0
Ubuntu:20.04:LTS
 before 8.0.40-0ubuntu0.20.04.1, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 30 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.18.0.31-0ubuntu0.20.04.28.0.32-0buntu0.20.04.18.0.32-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.18.0.33-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.48.0.34-0ubuntu0.20.04.18.0.35-0ubuntu0.20.04.18.0.36-0ubuntu0.20.04.18.0.37-0ubuntu0.20.04.38.0.39-0ubuntu0.20.04.1
8.0.40-0ubuntu0.20.04.1
mysql-8.0
Ubuntu:22.04:LTS
 before 8.0.40-0ubuntu0.22.04.1, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1
Show 14 moreShow less
8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.18.0.32-0buntu0.22.04.18.0.32-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.18.0.33-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.48.0.34-0ubuntu0.22.04.18.0.35-0ubuntu0.22.04.18.0.36-0ubuntu0.22.04.18.0.37-0ubuntu0.22.04.38.0.39-0ubuntu0.22.04.1
8.0.40-0ubuntu0.22.04.1
mysql-8.0
Ubuntu:24.04:LTS
 before 8.0.40-0ubuntu0.24.04.1, plus listed versions
8.0.34-1ubuntu18.0.35-1ubuntu18.0.35-1ubuntu28.0.36-18.0.36-2ubuntu1
Show 5 moreShow less
8.0.36-2ubuntu28.0.36-2ubuntu38.0.37-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.2
8.0.40-0ubuntu0.24.04.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21504 is a medium vulnerability (CVSS 4.9) in Oracle Mysql Server, published January 21, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. Fixed in mysql-8.0 8.0.40-0ubuntu0.20.04.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 69 references and the rest of 4 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open