Red Hat Security Advisory

RHSA-2025:16046

mysql:8.4 security update

Released 2025-09-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) mecab-0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64::mysql:8.4, mecab-0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le::mysql:8.4, mecab-0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x::mysql:8.4 +45

Fixes 51 records

TI-2025-21995 CVE-2025-30722 · GHSA-53hw-hvww-v6v8

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).

LOW 31

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00499 Published 2025-04-15 Fixed

TI-2025-15535 CVE-2025-21575 · GHSA-p48m-987f-62rc

Uncontrolled resource consumption in Oracle MySQL Cluster

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00967 Published 2025-04-15 Fixed CWE-400

TI-2025-15534 CVE-2025-21574 · GHSA-mx69-4qpq-mvf3

Uncontrolled resource consumption in Oracle MySQL Cluster

LOW 31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01112 Published 2025-04-15 Fixed CWE-400

TI-2025-31996 CVE-2025-50083 · GHSA-v39q-7g48-xfwh

Uncontrolled resource consumption in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00661 Published 2025-07-15 Fixed CWE-400

TI-2025-31995 CVE-2025-50082 · GHSA-gxx6-c6c4-42q6

Uncontrolled resource consumption in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00661 Published 2025-07-15 Fixed CWE-400

TI-2025-31991 CVE-2025-50078 · GHSA-vh54-wwr5-29q5

Uncontrolled resource consumption in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00661 Published 2025-07-15 Fixed CWE-400

TI-2025-21961 CVE-2025-30688 · GHSA-h8rc-25rp-vw97

Incorrect permission assignment in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00827 Published 2025-04-15 Fixed CWE-732

TI-2025-21960 CVE-2025-30687 · GHSA-m8pj-qq8w-cf26

Incorrect permission assignment in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00827 Published 2025-04-15 Fixed CWE-732

TI-2025-21955 CVE-2025-30682 · GHSA-c2x2-vjwh-p8qp

Incorrect permission assignment in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00827 Published 2025-04-15 Fixed CWE-732

TI-2025-15537 CVE-2025-21577 · GHSA-pxc5-947h-65gr

Uncontrolled resource consumption in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00817 Published 2025-04-15 Fixed CWE-400

TI-2025-21966 CVE-2025-30693 · GHSA-2cqp-v7m3-p6hm

Improper access control in Oracle MySQL Cluster

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00983 Published 2025-04-15 Fixed CWE-284

TI-2025-21968 CVE-2025-30695 · GHSA-84f3-9gqw-jffw

Improper access control in Oracle MySQL Server

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00747 Published 2025-04-15 Fixed CWE-284

TI-2025-31998 CVE-2025-50085 · GHSA-66qc-59q2-vv7v

Incorrect authorization in Oracle MySQL Server

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00523 Published 2025-07-15 Fixed CWE-863

TI-2025-32006 CVE-2025-50093 · GHSA-frxp-7wj7-f8m8

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00688 Published 2025-07-15 Fixed CWE-400

TI-2025-32005 CVE-2025-50092 · GHSA-6vp8-6x3p-3372

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00688 Published 2025-07-15 Fixed CWE-400

TI-2025-32004 CVE-2025-50091 · GHSA-wjxg-4572-7wfg

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00688 Published 2025-07-15 Fixed CWE-400

TI-2025-32001 CVE-2025-50088 · GHSA-3jqv-w6qj-4vh7

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00688 Published 2025-07-15 Fixed CWE-400

TI-2025-31993 CVE-2025-50080 · GHSA-qvcc-rmv3-gm6m

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00688 Published 2025-07-15 Fixed CWE-400

TI-2025-31992 CVE-2025-50079 · GHSA-8h6g-4g7p-297m

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00688 Published 2025-07-15 Fixed CWE-400

TI-2025-31990 CVE-2025-50077 · GHSA-2qmv-gpqm-6x56

Uncontrolled resource consumption in Oracle MySQL Cluster

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00688 Published 2025-07-15 Fixed CWE-400

TI-2025-21988 CVE-2025-30715 · GHSA-5mmh-2695-w96v

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00983 Published 2025-04-15 Fixed CWE-400

TI-2025-21978 CVE-2025-30705 · GHSA-p2xc-pjjh-xj6w

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00983 Published 2025-04-15 Fixed CWE-400

TI-2025-21972 CVE-2025-30699 · GHSA-22vg-rjg9-5qfr

Improper access control in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-284

TI-2025-21969 CVE-2025-30696 · GHSA-g6fh-mr9f-jrcx

Improper access control in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-284

TI-2025-21962 CVE-2025-30689 · GHSA-grgq-p9q4-xvmm

Improper access control in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-284

TI-2025-21958 CVE-2025-30685 · GHSA-7whc-q564-cpc4

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-732

TI-2025-21957 CVE-2025-30684 · GHSA-mgxr-xp39-whw3

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-732

TI-2025-21956 CVE-2025-30683 · GHSA-9cv6-q9x4-94jp

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-732

TI-2025-15548 CVE-2025-21588 · GHSA-5xv7-xrgm-g78v

Improper access control in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00916 Published 2025-04-15 Fixed CWE-284

TI-2025-15545 CVE-2025-21585 · GHSA-j68v-9w62-948r

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-732

TI-2025-15544 CVE-2025-21584 · GHSA-p66x-34qj-fv9h

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-732

TI-2025-15541 CVE-2025-21581 · GHSA-8wwc-fv22-w76f

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00909 Published 2025-04-15 Fixed CWE-732

TI-2025-15540 CVE-2025-21580 · GHSA-xrmr-grfc-w665

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00768 Published 2025-04-15 Fixed CWE-732

TI-2025-15539 CVE-2025-21579 · GHSA-3cqv-h6hf-3729

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00768 Published 2025-04-15 Fixed CWE-732

TI-2025-32015 CVE-2025-50102 · GHSA-q3rm-84j8-cvr4

Uncontrolled resource consumption in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00581 Published 2025-07-15 Fixed CWE-400

TI-2025-32014 CVE-2025-50101 · GHSA-mmgv-xv74-2786

Uncontrolled resource consumption in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00576 Published 2025-07-15 Fixed CWE-400

TI-2025-32012 CVE-2025-50099 · GHSA-2jr8-f8fj-4r8r

Uncontrolled resource consumption in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00576 Published 2025-07-15 Fixed CWE-400

TI-2025-32010 CVE-2025-50097 · GHSA-rgmx-p2xg-fvr8

Uncontrolled resource consumption in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00576 Published 2025-07-15 Fixed CWE-400

TI-2025-32007 CVE-2025-50094 · GHSA-q46v-973q-xcfg

Uncontrolled resource consumption in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00597 Published 2025-07-15 Fixed CWE-400

TI-2025-32000 CVE-2025-50087 · GHSA-x3xg-7fvh-66q9

Improper access control in Oracle MySQL Cluster

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00522 Published 2025-07-15 Fixed CWE-284

TI-2025-31999 CVE-2025-50086 · GHSA-gc72-8j9h-jjc3

Incorrect authorization in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00637 Published 2025-07-15 Fixed CWE-863

TI-2025-31997 CVE-2025-50084 · GHSA-2237-6m5h-9jw6

Incorrect authorization in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00637 Published 2025-07-15 Fixed CWE-863

TI-2025-21977 CVE-2025-30704 · GHSA-9mf7-6xj9-h3r8

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.0084 Published 2025-04-15 Fixed CWE-400

TI-2025-32009 CVE-2025-50096 · GHSA-qgc6-wcr8-wwjx

Uncontrolled resource consumption in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00209 Published 2025-07-15 Fixed CWE-400

TI-2025-21994 CVE-2025-30721 · GHSA-v29c-h5f4-7c2v

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).

LOW 18

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).

CVSS 3.1MEDIUM 4.0 Local High privileges User interaction EPSS 0.00242 Published 2025-04-15 Fixed

TI-2025-31994 CVE-2025-50081 · GHSA-rm7f-f74m-5fjv

Improper access control in Oracle MySQL Cluster

LOW 15

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).

CVSS 3.1LOW 3.1 Network High privileges User interaction EPSS 0.00301 Published 2025-07-15 Fixed CWE-284

TI-2025-21954 CVE-2025-30681 · GHSA-grxg-qf98-pfw3

Uncontrolled resource consumption in Oracle MySQL Cluster

LOW 15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00795 Published 2025-04-15 Fixed CWE-400

TI-2025-32017 CVE-2025-50104 · GHSA-44qq-rw3f-7562

Uncontrolled resource consumption in Oracle MySQL Server

LOW 14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00521 Published 2025-07-15 Fixed CWE-400

TI-2025-32011 CVE-2025-50098 · GHSA-v8c7-m4fp-fc53

Uncontrolled resource consumption in Oracle MySQL Server

LOW 14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00521 Published 2025-07-15 Fixed CWE-400

TI-2025-21976 CVE-2025-30703 · GHSA-qjgh-6vq4-q6jf

Incorrect authorization in Oracle MySQL Server

LOW 14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.0058 Published 2025-04-15 Fixed CWE-863

TI-2025-32013 CVE-2025-50100 · GHSA-r33m-95px-px34

Uncontrolled resource consumption in Oracle MySQL Server

LOW 12

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).

CVSS 3.1LOW 2.2 Network High privileges No interaction EPSS 0.0044 Published 2025-07-15 Fixed CWE-400