Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

vendor_unpatched cve-2025-50091: Unpatched CVEs for Red Hat Enterprise Linux, CentOS Linux, Ubuntu Linux (cve-2025-50091)

oracle CPUJul2025: MySQL Cluster 9.3.1

oracle CPUJul2025: MySQL Cluster 9.2.1

oracle CPUJul2025: MySQL Server 9.2.1

oracle CPUJul2025: MySQL Cluster 8.4.6

oracle CPUJul2025: MySQL Server 8.0.42

oracle CPUJul2025: MySQL Server 8.4.6

oracle CPUJul2025: MySQL Server 8.4.5

oracle CPUJul2025: MySQL Server 9.1.1

oracle CPUJul2025: MySQL Server 9.3.1

oracle CPUJul2025: MySQL Cluster 8.0.43

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-50091 advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability     allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. (CVE-2025-50091)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of MySQL Server installed on the remote host are affected by a multiple vulnerabilities as referenced in the July 2025 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that     are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and  9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of     MySQL Server. (CVE-2025-50101)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that     are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and  9.0.0-9.3.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS)     of MySQL Server. (CVE-2025-50102)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).  Supported versions that are     affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and  9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged     attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this     vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL     Server. (CVE-2025-50104)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
244811	CBL Mariner 2.0 Security Update: mysql (CVE-2025-50091)	Nessus	MarinerOS Local Security Checks	medium
242316	Oracle MySQL Server 9.0.x < 9.4.0 (July 2025 CPU)	Nessus	Databases	medium
242313	Oracle MySQL Server 8.0.x < 8.0.43 (July 2025 CPU)	Nessus	Databases	medium
242312	Oracle MySQL Server 8.4.x < 8.4.6 (July 2025 CPU)	Nessus	Databases	medium

Detections

Analytics

CVE-2025-50091

medium

Tenable Plugins

Coming Soon

medium

medium

medium

medium