CVE Catalog

CVE-2025-53054

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.48%

39th percentile - higher than 39% of all known CVEs

Summary

A vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged authenticated attacker with network access can cause a hang or repeatable crash (complete DoS) and perform unauthorized data modifications.

Risk Assessment

A high-privileged attacker could remotely cause MySQL Server unavailability and modify data, impacting integrity and availability of dependent systems.

Recommendation

Update MySQL Server to a version containing the fix (outside 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0) and restrict network access to the database server.

Other vulnerabilities in MySQL Server

See all
Original NVD description (English source)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS