CVE-2025-30681

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

A low impact vulnerability was found in the MySQL Server Replication component of Oracle MySQL, affecting MySQL Server versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. A remote attacker with high privileges who has network access via multiple protocols could exploit this flaw to cause a partial denial of service of MySQL Server. Red Hat rates the severity of this flaw as Low (CVSS 3.1 base score 2.7), consistent with the upstream Oracle assessment. The mysql packages in Red Hat Enterprise Linux 8, 9, and 10, including the mysql:8.0 and mysql:8.4 module streams, are affected, and a fix is being pursued through the delegated update process. The mysql package in Red Hat Enterprise Linux 6 Extended Lifecycle Support is not affected because the vulnerable code is not present in that version. The mysql packages in Red Hat In-Vehicle OS 1.0 and in Fedora are also affected; remediation for these offerings is currently deferred, and the residual risk is limited to a partial denial of service by a highly privileged attacker.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.