Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-21501

Опубликовано: 21 янв. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.5

Описание

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

РелизСтатусПримечание
devel

not-affected

this mysql cve does not affect mariadb
esm-apps/noble

not-affected

this mysql cve does not affect mariadb
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

not-affected

this mysql cve does not affect mariadb
oracular

ignored

end of life, was needs-triage
plucky

not-affected

this mysql cve does not affect mariadb
questing

not-affected

this mysql cve does not affect mariadb
upstream

not-affected

this mysql cve does not affect mariadb

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/xenial

not-affected

this mysql cve does not affect mariadb
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

upstream

not-affected

this mysql cve does not affect mariadb

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

not-affected

this mysql cve does not affect mariadb
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

upstream

not-affected

this mysql cve does not affect mariadb

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

not-affected

this mysql cve does not affect mariadb
focal

ignored

end of standard support, was ignored [no more upstream support]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

upstream

not-affected

this mysql cve does not affect mariadb

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

not-affected

this mysql cve does not affect mariadb
esm-infra/focal

DNE

focal

DNE

jammy

not-affected

this mysql cve does not affect mariadb
noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

upstream

not-affected

this mysql cve does not affect mariadb

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

ignored

see notes
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

see notes
esm-infra/focal

DNE

esm-infra/xenial

ignored

see notes
focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

released

8.0.41-0ubuntu0.20.04.1
focal

released

8.0.41-0ubuntu0.20.04.1
jammy

released

8.0.41-0ubuntu0.22.04.1
noble

released

8.0.41-0ubuntu0.24.04.1
oracular

released

8.0.41-0ubuntu0.24.10.1
plucky

DNE

questing

DNE

upstream

released

8.0.41

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/xenial

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/xenial

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 51%
0.00283
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

redhat логотип

CVE-2025-21501

CVSS3: 6.5
redhat
11 месяцев назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

nvd логотип

CVE-2025-21501

CVSS3: 6.5
nvd
11 месяцев назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

debian логотип

CVE-2025-21501

CVSS3: 6.5
debian
11 месяцев назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: ...

github логотип

GHSA-2rv4-97h7-fxhx

CVSS3: 6.5
github
11 месяцев назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

fstec логотип

BDU:2025-01187

CVSS3: 6.5
fstec
11 месяцев назад

Уязвимость компонента Server: Optimizer системы управления базами данных MySQL Server, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации и доступ на изменение, добавление или удаление данных

EPSS

Процентиль: 51%
0.00283
Низкий

6.5 Medium

CVSS3

Уязвимость CVE-2025-21501