Detections
Analytics

Oracle MySQL Server 8.0.x < 8.0.42 (July 2025 CPU)

medium Nessus Plugin ID 242314

Language:

Synopsis

The remote host is affected by a DoS vulnerability

Description

The versions of MySQL Server installed on the remote host are affected by a DoS vulnerability as referenced in the July 2025 CPU advisory.

 - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2025-50088)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Apply the appropriate patch according to the July 2025 Oracle Critical Patch Update advisory.

See Also

https://www.oracle.com/security-alerts/cpujul2025.html

https://www.oracle.com/docs/tech/security-alerts/cpujul2025csaf.json

Plugin Details

Severity: Medium

ID: 242314

File Name: mysql_8_0_42.nasl

Version: 1.1

Type: combined

Agent: windows, macosx, unix

Family: Databases

Published: 7/18/2025

Updated: 7/18/2025

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-50088

CVSS v3

Risk Factor: Medium

Base Score: 4.9

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Vulnerability Information

CPE: cpe:/a:oracle:mysql

Required KB Items: installed_sw/MySQL Server

Patch Publication Date: 7/15/2025

Vulnerability Publication Date: 7/15/2025

Reference Information

CVE: CVE-2025-50088

IAVA: 2025-A-0518