CVE-2025-50096

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

History

16 Jul 2025, 19:51

Type Values Removed Values Added
CPE cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
References () https://www.oracle.com/security-alerts/cpujul2025.html - () https://www.oracle.com/security-alerts/cpujul2025.html - Vendor Advisory
First Time Oracle mysql
Oracle

16 Jul 2025, 15:15

Type Values Removed Values Added
CWE CWE-400

16 Jul 2025, 14:58

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB). Las versiones compatibles afectadas son 8.0.0-8.0.42, 8.4.0-8.4.5 y 9.0.0-9.3.0. Esta vulnerabilidad, fácilmente explotable, permite a un atacante con privilegios elevados, con acceso a la infraestructura donde se ejecuta MySQL Server, comprometer MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden provocar un bloqueo o un fallo repetitivo (DOS completo) de MySQL Server. Puntuación base de CVSS 3.1: 4.4 (Afecta a la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

15 Jul 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-15 20:15

Updated : 2025-07-16 19:51


NVD link : CVE-2025-50096

Mitre link : CVE-2025-50096

CVE.ORG link : CVE-2025-50096


JSON object : View

Products Affected

oracle

  • mysql
CWE
CWE-400

Uncontrolled Resource Consumption