CVE-2025-53042

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

A moderate impact vulnerability was found in the MySQL Server Optimizer. A high privileged attacker with network access via multiple protocols could exploit this flaw to cause a hang or frequently repeatable crash, resulting in a complete denial of service of the MySQL server; confidentiality and integrity are not affected. The Red Hat CVSS 3.1 base score of 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) matches the upstream severity. The mysql:8.0 and mysql:8.4 components in Red Hat Enterprise Linux 8, the mysql and mysql:8.4 components in Red Hat Enterprise Linux 9, and mysql8.4 in Red Hat Enterprise Linux 10 are affected, and fixes are being pursued through the upstream MySQL project. The mysql package in Red Hat Enterprise Linux 6 Extended Lifecycle Support is not affected because the vulnerable code is not present. In Fedora, the mysql8.4 package received a fix via errata, while the mysql8.0 fix is deferred to a future rawhide update, leaving that stream exposed to denial of service until it is updated.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.