CVE-2025-21579

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Apr 15, 2025
Updated: Apr 17, 2025
CWE ID 732

Summary

CVE-2025-21579 is a serious vulnerability affecting the MySQL Server component of Oracle MySQL versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. This issue allows a high-privileged attacker with network access to exploit the server via multiple protocols, leading to a hang or frequently repeatable crash (complete Denial of Service) of the MySQL Server. The impact of this vulnerability is rated high for availability, with a CVSS Base Score of 4.9. Attackers can exploit this easily, making it a significant threat to organizations using the affected MySQL Server versions.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Oracle MySQL Server
  • MySQL

Affected Vendors

  • Oracle