CVE-2025-50077

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

A moderate-impact denial-of-service vulnerability was found in the InnoDB component of Oracle MySQL Server. The flaw is easily exploitable by a high-privileged attacker with network access via multiple protocols, and successful attacks can result in a hang or frequently repeatable crash (complete denial of service) of MySQL Server, affecting availability only. Red Hat Enterprise Linux 8, 9, and 10 ship affected mysql and mysql8.4 components, and fixes are being pursued through the respective product update streams. Red Hat Enterprise Linux 6 Extended Lifecycle Support is not affected because the vulnerable code is not present in its mysql packages. The Red Hat In-Vehicle OS stream was assessed through delegation as not affected. For Fedora, the fix for the mysql8.0 and mysql8.4 packages is deferred, leaving the residual risk that a high-privileged attacker with network access can cause a complete denial of service until updated packages are delivered. The Red Hat severity (Moderate, CVSS 3.1 base score 4.9, CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) matches the upstream Oracle assessment of 4.9.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.