Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2025-50088)

Note that Nessus relies on the presence of the package as reported by the vendor.

The versions of MySQL Server installed on the remote host are affected by a DoS vulnerability as referenced in the July 2025 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected     are 8.0.0-8.0.41, 8.4.0-8.4.4 and  9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result     in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2025-50088)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
249532	Linux Distros Unpatched Vulnerability : CVE-2025-50088	Nessus	Misc.	medium
242315	Oracle MySQL Server 8.4.x < 8.4.5 (July 2025 CPU)	Nessus	Databases	medium
242314	Oracle MySQL Server 8.0.x < 8.0.42 (July 2025 CPU)	Nessus	Databases	medium
242311	Oracle MySQL Server 9.0.x < 9.3.0 (July 2025 CPU)	Nessus	Databases	medium

Detections

Analytics

CVE-2025-50088

medium

Tenable Plugins

medium

medium

medium

medium