Cloudanix VulnDB

CVE-2025-21525

None

CVSS

—

EPSS

1.0%

Published

Jan 21, 2025

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A problem in the database server lets certain trusted users send commands that make the server stop responding or crash, interrupting any applications that depend on it.

Exploitation
Remote Authenticated
Attacker needs
High Privilege
Complexity
Low
Impact
Denial Of Service
Component
Network Service
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

High-privileged network attacker can trigger a hang or repeatable crash (complete DoS) in the Server: DDL component of affected MySQL/MariaDB servers.

Why it matters to the business

Database service interruptions cause application downtime, delayed transactions, and operational disruption for any systems relying on the affected database versions.

How an attack unfolds

An attacker with high-privileged database credentials connects over supported protocols and issues crafted DDL statements that trigger the flaw in the DDL handling code path, resulting in a server hang or crash.

How to fix it

Upgrade MariaDB packages on Ubuntu to the listed fixed versions: mariadb-10.6 on 22.04 to 1:10.6.18-0ubuntu0.22.04.1, mariadb on 24.04 to 1:10.11.8-0ubuntu0.24.04.1, and mariadb on 23.10 to 1:10.11.8-0ubuntu0.23.10.1. Apply equivalent patches for any Oracle MySQL deployments matching the affected version ranges.

How to confirm the fix worked

Verify installed package versions against the fixed releases, confirm the DDL component no longer allows the hang/crash condition under test cases, and monitor for updated version strings in logs after restart.

Typical attack path

  1. Obtain or compromise high-privileged database account with network access
  2. Connect to the MySQL/MariaDB server using supported protocols
  3. Issue specially crafted DDL commands targeting the vulnerable component
  4. Trigger server hang or crash, achieving denial of service

How to detect it

Review database error and crash logs for repeated DDL-related failures or abrupt terminations around the time of suspected activity; correlate with connection logs from high-privileged accounts.

What your security team should do

  • Immediately schedule upgrades to the fixed MariaDB package versions for all listed Ubuntu releases
  • Restrict high-privileged database accounts to trusted networks and review necessity
  • Test patched instances for availability under expected DDL workloads before production rollout
  • Monitor EPSS and exploit maturity for any increase in risk

The record

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:8 mecab 0 0.996-2.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab 0 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux:8 mecab-devel 0 0.996-2.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab-devel 0 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux:8 mecab-ipadic 0 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab-ipadic-EUCJP 0 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-common 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-devel 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-errmsg 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-libs 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-server 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql-test 0 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux:9 mysql 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-common 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-devel 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-errmsg 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-libs 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-server 0 8.0.41-2.el9_5
AlmaLinux:9 mysql-test 0 8.0.41-2.el9_5
Rocky Linux:8 mecab 0 0:0.996-2.module+el8.10.0+1676+9b4b6e24
Rocky Linux:8 mecab-ipadic 0 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
Rocky Linux:8 mysql 0 0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
Rocky Linux:9 mysql 0 0:8.0.41-2.el9_5
Ubuntu:14.04:LTS mysql-5.5 0 No fix
Ubuntu:16.04:LTS mariadb-10.0 0 No fix
Ubuntu:16.04:LTS percona-server-5.6 0 No fix
Ubuntu:16.04:LTS percona-xtradb-cluster-5.6 0 No fix
Ubuntu:18.04:LTS mariadb-10.1 0 No fix
Ubuntu:20.04:LTS mariadb-10.3 0 No fix
Ubuntu:20.04:LTS mysql-8.0 0 8.0.40-0ubuntu0.20.04.1
Ubuntu:22.04:LTS mariadb-10.6 0 No fix
Ubuntu:22.04:LTS mysql-8.0 0 8.0.40-0ubuntu0.22.04.1
Ubuntu:24.04:LTS mariadb 0 No fix
Ubuntu:24.04:LTS mysql-8.0 0 8.0.40-0ubuntu0.24.04.1
Ubuntu:24.10 mariadb 0 No fix
Ubuntu:24.10 mysql-8.0 0 8.0.40-0ubuntu0.24.10.1
Ubuntu:25.04 mariadb 0 No fix
Ubuntu:25.10 mariadb 0 No fix
Ubuntu:Pro:14.04:LTS mysql-5.5 0 No fix
Ubuntu:Pro:16.04:LTS mariadb-10.0 0 No fix
Ubuntu:Pro:16.04:LTS mysql-5.7 0 No fix
Ubuntu:Pro:16.04:LTS percona-server-5.6 0 No fix
Ubuntu:Pro:16.04:LTS percona-xtradb-cluster-5.6 0 No fix
Ubuntu:Pro:18.04:LTS mariadb-10.1 0 No fix
Ubuntu:Pro:18.04:LTS mysql-5.7 0 No fix
Ubuntu:Pro:20.04:LTS mariadb-10.3 0 No fix

Related vulnerabilities