CVE-2025-53067
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affects versions 9.0.0-9.4.0. Easily exploitable by a high privileged attacker with network access via multiple protocols, can cause a hang or frequently repeatable crash (complete DoS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).
Risk Assessment
An attacker with high privileges could cause unavailability of the MySQL server, potentially disrupting applications relying on the database.
Recommendation
Apply patches provided by Oracle for affected MySQL Server versions.
Other vulnerabilities in Oracle MySQL
See all- CVE-2016-5625High
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging.
- CVE-2016-3440High
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
Original NVD description (English source)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS