CVE-2025-21579

What it actually does

The vulnerability in the Server: Options component allows a high-privileged attacker with network access to trigger a hang or repeatable crash resulting in complete denial of service against MySQL Server.

Why it matters to the business

Causes repeated database outages that disrupt applications and services relying on MySQL availability; low exploitation likelihood but high operational impact when triggered.

How an attack unfolds

A high-privileged attacker authenticates over supported network protocols and sends crafted requests to the Options component, causing the server process to hang or crash.

How to fix it

Upgrade MySQL 8.0.x to a release after 8.0.41, 8.4.x after 8.4.4, and 9.0-9.2.x after 9.2.0 per Oracle advisory; restrict unnecessary network exposure until patched.

How to confirm the fix worked

Confirm MySQL version exceeds the affected ranges, review release notes for the fix, and test that privileged connections cannot induce crashes via the Options component.

Typical attack path

1. Obtain high-privileged network credentials for the MySQL instance
2. Connect to the server using supported protocols
3. Submit malicious options-related requests
4. Trigger server hang or crash resulting in denial of service

How to detect it

Inspect MySQL error logs and process crash dumps for repeated terminations initiated by privileged sessions; correlate with network connection logs from high-privilege accounts.

What your security team should do

• Apply the Oracle-supplied patches to all affected MySQL instances
• Limit network access to database servers to trusted sources only
• Audit high-privileged accounts and their network connectivity
• Monitor database availability metrics for sudden hangs or restarts