CVE-2025-21585
Fixed in a distro release EPSS <1%CVSS 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Products: Oracle Corporation MySQL Server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | mysql-selinux | 1.0.14-1.el10_0 |
| AlmaLinux 10 | mysql8.4-common | 8.4.6-2.el10_0 |
| AlmaLinux 10 | mysql8.4-errmsg | 8.4.6-2.el10_0 |
| AlmaLinux 10 | mysql8.4-test-data | 8.4.6-2.el10_0 |
| AlmaLinux 8 | mecab | 0.996-2.module_el8.6.0+3340+d764b636 |
| AlmaLinux 8 | mecab | 0.996-2.module_el8.10.0+3965+b415b607 |
| AlmaLinux 8 | mecab-devel | 0.996-2.module_el8.10.0+3965+b415b607 |
| AlmaLinux 8 | mecab-devel | 0.996-2.module_el8.6.0+3340+d764b636 |
| AlmaLinux 8 | mecab-ipadic | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 |
| AlmaLinux 8 | mecab-ipadic-EUCJP | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 |
| AlmaLinux 8 | mysql | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux 8 | mysql-common | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux 8 | mysql-devel | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux 8 | mysql-errmsg | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux 8 | mysql-libs | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux 8 | mysql-server | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux 8 | mysql-test | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux 9 | mecab | 0.996-3.module_el9.6.0+152+8cbce00c.4 |
| AlmaLinux 9 | mecab-devel | 0.996-3.module_el9.6.0+152+8cbce00c.4 |
| AlmaLinux 9 | mecab-ipadic | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c |
| AlmaLinux 9 | mecab-ipadic-EUCJP | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c |
| AlmaLinux 9 | mysql | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux 9 | mysql | 8.0.43-1.el9_6 |
| AlmaLinux 9 | mysql-common | 8.0.43-1.el9_6 |
| AlmaLinux 9 | mysql-common | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux 9 | mysql-devel | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux 9 | mysql-devel | 8.0.43-1.el9_6 |
| AlmaLinux 9 | mysql-errmsg | 8.0.43-1.el9_6 |
| AlmaLinux 9 | mysql-errmsg | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux 9 | mysql-libs | 8.0.43-1.el9_6 |
| AlmaLinux 9 | mysql-libs | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux 9 | mysql-server | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux 9 | mysql-server | 8.0.43-1.el9_6 |
| AlmaLinux 9 | mysql-test | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux 9 | mysql-test | 8.0.43-1.el9_6 |
| AlmaLinux 9 | mysql-test-data | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux 9 | rapidjson-devel | 1.1.0-19.module_el9.6.0+152+8cbce00c |
| AlmaLinux 9 | rapidjson-doc | 1.1.0-19.module_el9.6.0+152+8cbce00c |
| Red Hat Enterprise Linux 10.0 | mysql-selinux | 0:1.0.14-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4 | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-common | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-debuginfo | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-debugsource | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-devel | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-devel-debuginfo | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-errmsg | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-libs | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-libs-debuginfo | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-server | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-server-debuginfo | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-test | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-test-data | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 10.0 | mysql8.4-test-debuginfo | 0:8.4.6-2.el10_0 |
| Red Hat Enterprise Linux 8 | mecab | 0:0.996-2.module+el8.10.0+22857+7f331edd |
| Red Hat Enterprise Linux 8 | mecab-debuginfo | 0:0.996-2.module+el8.10.0+22857+7f331edd |
| Red Hat Enterprise Linux 8 | mecab-debugsource | 0:0.996-2.module+el8.10.0+22857+7f331edd |
| Red Hat Enterprise Linux 8 | mecab-devel | 0:0.996-2.module+el8.10.0+22857+7f331edd |
| Red Hat Enterprise Linux 8 | mecab-ipadic | 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd |
| Red Hat Enterprise Linux 8 | mecab-ipadic-EUCJP | 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd |
| Red Hat Enterprise Linux 8 | mysql | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-common | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-debuginfo | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-debugsource | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-devel | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-devel-debuginfo | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-errmsg | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-libs | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-libs-debuginfo | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-server | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-server-debuginfo | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-test | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 8 | mysql-test-debuginfo | 0:8.0.43-1.module+el8.10.0+23526+fabc920a |
| Red Hat Enterprise Linux 9 | mecab | 0:0.996-3.module+el9.6.0+22713+cbf15e23.4 |
| Red Hat Enterprise Linux 9 | mecab-debuginfo | 0:0.996-3.module+el9.6.0+22713+cbf15e23.4 |
| Red Hat Enterprise Linux 9 | mecab-debugsource | 0:0.996-3.module+el9.6.0+22713+cbf15e23.4 |
| Red Hat Enterprise Linux 9 | mecab-devel | 0:0.996-3.module+el9.6.0+22713+cbf15e23.4 |
| Red Hat Enterprise Linux 9 | mecab-ipadic | 0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23 |
| Red Hat Enterprise Linux 9 | mecab-ipadic-EUCJP | 0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23 |
| Red Hat Enterprise Linux 9 | mysql | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-common | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-common | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-debuginfo | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-debuginfo | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-debugsource | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-debugsource | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-devel | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-devel | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-devel-debuginfo | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-devel-debuginfo | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-errmsg | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-errmsg | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-libs | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-libs | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-libs-debuginfo | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-libs-debuginfo | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-server | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-server | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-server-debuginfo | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-server-debuginfo | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-test | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | mysql-test | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-test-data | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-test-debuginfo | 0:8.4.6-1.module+el9.6.0+23497+d0c5dcca |
| Red Hat Enterprise Linux 9 | mysql-test-debuginfo | 0:8.0.43-1.el9_6 |
| Red Hat Enterprise Linux 9 | rapidjson | 0:1.1.0-19.module+el9.6.0+22713+cbf15e23 |
| Red Hat Enterprise Linux 9 | rapidjson-devel | 0:1.1.0-19.module+el9.6.0+22713+cbf15e23 |
| Red Hat Enterprise Linux 9 | rapidjson-doc | 0:1.1.0-19.module+el9.6.0+22713+cbf15e23 |
| Rocky Linux 10 | mysql-selinux | 0:1.0.14-1.el10_0 |
| Rocky Linux 10 | mysql8.4 | 0:8.4.6-2.el10_0 |
| Rocky Linux 8 | mecab | 0:0.996-2.module+el8.10.0+2091+db4d14f6 |
| Rocky Linux 8 | mecab | 0:0.996-2.module+el8.10.0+1937+28fbbc83 |
| Rocky Linux 8 | mecab | 0:0.996-2.module+el8.10.0+1676+9b4b6e24 |
| Rocky Linux 8 | mecab-ipadic | 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83 |
| Rocky Linux 8 | mecab-ipadic | 0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6 |
| Rocky Linux 8 | mysql | 0:8.0.43-1.module+el8.10.0+2065+e68efcea.0.1 |
| Rocky Linux 9 | mecab | 0:0.996-3.module+el9.7.0+40027+0df0d4e0.4 |
| Rocky Linux 9 | mecab-ipadic | 0:2.7.0.20070801-24.module+el9.7.0+40027+0df0d4e0 |
| Rocky Linux 9 | mysql | 0:8.4.6-1.module+el9.7.0+40027+0df0d4e0 |
| Rocky Linux 9 | mysql | 0:8.0.43-1.el9_6 |
| Rocky Linux 9 | rapidjson | 0:1.1.0-19.module+el9.7.0+40027+0df0d4e0 |
| Ubuntu 14.04 LTS | mysql-5.5 | no fix |
| Ubuntu 16.04 LTS | percona-server-5.6 | no fix |
| Ubuntu 16.04 LTS | percona-xtradb-cluster-5.6 | no fix |
| Ubuntu 20.04 LTS | mariadb-10.3 | no fix |
| Ubuntu 20.04 LTS | mysql-8.0 | 8.0.42-0ubuntu0.20.04.1 |
| Ubuntu 22.04 LTS | mysql-8.0 | 8.0.42-0ubuntu0.22.04.1 |
| Ubuntu 24.04 LTS | mysql-8.0 | 8.0.42-0ubuntu0.24.04.1 |
| Ubuntu 25.10 | mysql-8.4 | 8.4.5-0ubuntu1 |
| Ubuntu Pro 16.04 LTS | mysql-5.7 | no fix |
| Ubuntu Pro 18.04 LTS | mysql-5.7 | no fix |