CVE-2025-30693
NoneCVSS
—
EPSS
1.0%
Published
Apr 15, 2025
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A problem in the database software lets certain trusted users who can reach it over the network crash the system or quietly change some stored information, which can interrupt business operations.
- Exploitation
- Remote Authenticated
- Attacker needs
- High Privilege
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Application
- Class
- Denial of service
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The flaw in the InnoDB component permits a high-privileged network attacker to trigger a server hang or repeatable crash while also performing unauthorized data modifications (insert/update/delete) on accessible tables.
Why it matters to the business
Successful exploitation can produce unplanned database downtime and limited data integrity loss; because the attack requires high privileges the blast radius is narrower but still disrupts critical operations and may require emergency recovery procedures.
How an attack unfolds
An attacker who already possesses high-privileged credentials connects to the MySQL Server over any supported network protocol and submits specially crafted requests that exercise the vulnerable InnoDB code path, resulting in resource exhaustion or a crash together with unauthorized data changes.
How to fix it
Upgrade affected MySQL Server installations to the latest vendor-supplied versions that resolve the issue in the InnoDB component; restrict unnecessary network exposure and review high-privileged accounts until patches are applied.
How to confirm the fix worked
Confirm the running MySQL version is outside the affected ranges (8.0.0-8.0.41, 8.4.0-8.4.4, 9.0.0-9.2.0), review release notes for the InnoDB fix, and perform functional testing that exercises InnoDB operations under load.
Typical attack path
- Obtain or compromise a high-privileged MySQL account with network access
- Establish a connection using any permitted protocol
- Issue crafted SQL or protocol messages that target the InnoDB storage engine
- Observe server hang, crash, or data modification confirming successful exploitation
How to detect it
Monitor database server logs for repeated InnoDB assertion failures, unexpected process terminations, or sudden spikes in crash-recovery messages; correlate with authentication events from privileged accounts.
What your security team should do
- Apply vendor patches to all MySQL instances at the earliest maintenance window
- Limit network accessibility of database servers to only trusted sources
- Audit and reduce the number of high-privileged accounts with remote access
- Enable enhanced logging of InnoDB errors and crashes for rapid detection
The record
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:10 | mariadb | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-backup | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-client-utils | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-common | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-devel | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-embedded | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-embedded-devel | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-errmsg | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-gssapi-server | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-oqgraph-engine | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-pam | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-server | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-server-galera | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-server-utils | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mariadb-test | 0 | 3:10.11.15-1.el10_1 |
| AlmaLinux:10 | mysql-selinux | 0 | 1.0.14-1.el10_0 |
| AlmaLinux:10 | mysql8.4 | 0 | 8.4.6-2.el10_0 |
| AlmaLinux:10 | mysql8.4-common | 0 | 8.4.6-2.el10_0 |
| AlmaLinux:10 | mysql8.4-devel | 0 | 8.4.6-2.el10_0 |
| AlmaLinux:10 | mysql8.4-errmsg | 0 | 8.4.6-2.el10_0 |
| AlmaLinux:10 | mysql8.4-libs | 0 | 8.4.6-2.el10_0 |
| AlmaLinux:10 | mysql8.4-server | 0 | 8.4.6-2.el10_0 |
| AlmaLinux:10 | mysql8.4-test | 0 | 8.4.6-2.el10_0 |
| AlmaLinux:10 | mysql8.4-test-data | 0 | 8.4.6-2.el10_0 |
| AlmaLinux:8 | Judy | 0 | 1.0.5-18.module_el8.10.0+3947+ac422511 |
| AlmaLinux:8 | Judy | 0 | 1.0.5-18.module_el8.8.0+3620+5d452900 |
| AlmaLinux:8 | galera | 0 | 26.4.22-1.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-backup | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-common | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-devel | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-embedded | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-embedded-devel | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-errmsg | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-gssapi-server | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-oqgraph-engine | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-pam | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-server | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-server-galera | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-server-utils | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mariadb-test | 0 | 3:10.5.29-2.module_el8.10.0+4059+10818090 |
| AlmaLinux:8 | mecab | 0 | 0.996-2.module_el8.10.0+3965+b415b607 |
| AlmaLinux:8 | mecab | 0 | 0.996-2.module_el8.6.0+3340+d764b636 |
| AlmaLinux:8 | mecab-devel | 0 | 0.996-2.module_el8.10.0+3965+b415b607 |
| AlmaLinux:8 | mecab-devel | 0 | 0.996-2.module_el8.6.0+3340+d764b636 |
| AlmaLinux:8 | mecab-ipadic | 0 | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 |
| AlmaLinux:8 | mecab-ipadic-EUCJP | 0 | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 |
| AlmaLinux:8 | mysql | 0 | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux:8 | mysql-common | 0 | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux:8 | mysql-devel | 0 | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux:8 | mysql-errmsg | 0 | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux:8 | mysql-libs | 0 | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux:8 | mysql-server | 0 | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux:8 | mysql-test | 0 | 8.0.43-1.module_el8.10.0+4049+06e4dcce |
| AlmaLinux:9 | galera | 0 | 26.4.22-1.el9_6 |
| AlmaLinux:9 | galera | 0 | 26.4.20-1.module_el9.5.0+135+c9657a87 |
| AlmaLinux:9 | mariadb | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-backup | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-backup | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-common | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-common | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-devel | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-devel | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-embedded | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-embedded | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-embedded-devel | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-embedded-devel | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-errmsg | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-errmsg | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-gssapi-server | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-gssapi-server | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-oqgraph-engine | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-oqgraph-engine | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-pam | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-pam | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-server | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-server | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-server-galera | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-server-galera | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-server-utils | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-server-utils | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mariadb-test | 0 | 3:10.5.29-2.el9_6 |
| AlmaLinux:9 | mariadb-test | 0 | 3:10.11.15-1.module_el9.7.0+199+a988ea01 |
| AlmaLinux:9 | mecab | 0 | 0.996-3.module_el9.6.0+152+8cbce00c.4 |
| AlmaLinux:9 | mecab-devel | 0 | 0.996-3.module_el9.6.0+152+8cbce00c.4 |
| AlmaLinux:9 | mecab-ipadic | 0 | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c |
| AlmaLinux:9 | mecab-ipadic-EUCJP | 0 | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c |
| AlmaLinux:9 | mysql | 0 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux:9 | mysql | 0 | 8.0.43-1.el9_6 |
| AlmaLinux:9 | mysql-common | 0 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux:9 | mysql-common | 0 | 8.0.43-1.el9_6 |
| AlmaLinux:9 | mysql-devel | 0 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux:9 | mysql-devel | 0 | 8.0.43-1.el9_6 |
| AlmaLinux:9 | mysql-errmsg | 0 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux:9 | mysql-errmsg | 0 | 8.0.43-1.el9_6 |
| AlmaLinux:9 | mysql-libs | 0 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux:9 | mysql-libs | 0 | 8.0.43-1.el9_6 |
| AlmaLinux:9 | mysql-server | 0 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux:9 | mysql-server | 0 | 8.0.43-1.el9_6 |
| AlmaLinux:9 | mysql-test | 0 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux:9 | mysql-test | 0 | 8.0.43-1.el9_6 |
| AlmaLinux:9 | mysql-test-data | 0 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| AlmaLinux:9 | rapidjson-devel | 0 | 1.1.0-19.module_el9.6.0+152+8cbce00c |
| AlmaLinux:9 | rapidjson-doc | 0 | 1.1.0-19.module_el9.6.0+152+8cbce00c |
| Bitnami | mariadb | 0 | 10.5.29 |
| Bitnami | mariadb-min | 0 | 11.4.7 |
| Bitnami | mysql-client | 0 | 10.6.22 |
| Chainguard | mariadb-10.11 | 0 | 0 |
| Chainguard | mariadb-10.11-backup | 0 | 0 |
| Chainguard | mariadb-10.11-bench | 0 | 0 |
| Chainguard | mariadb-10.11-client | 0 | 0 |
| Chainguard | mariadb-10.11-dev | 0 | 0 |
| Chainguard | mariadb-10.11-doc | 0 | 0 |
| Chainguard | mariadb-10.11-embedded | 0 | 0 |
| Chainguard | mariadb-10.11-oci-entrypoint | 0 | 0 |
| Chainguard | mariadb-10.11-test | 0 | 0 |
| Chainguard | mariadb-11.6 | 0 | 0 |
| Chainguard | mariadb-11.6-backup | 0 | 0 |
| Chainguard | mariadb-11.6-bench | 0 | 0 |
| Chainguard | mariadb-11.6-client | 0 | 0 |
| Chainguard | mariadb-11.6-dev | 0 | 0 |
| Chainguard | mariadb-11.6-doc | 0 | 0 |
| Chainguard | mariadb-11.6-embedded | 0 | 0 |
| Chainguard | mariadb-11.6-oci-entrypoint | 0 | 0 |
| Chainguard | mariadb-11.6-test | 0 | 0 |
| Chainguard | mariadb-11.7 | 0 | 0 |
| Chainguard | mariadb-11.7-backup | 0 | 0 |
| Chainguard | mariadb-11.7-bench | 0 | 0 |
| Chainguard | mariadb-11.7-client | 0 | 0 |
| Chainguard | mariadb-11.7-dev | 0 | 0 |
| Chainguard | mariadb-11.7-doc | 0 | 0 |
| Chainguard | mariadb-11.7-embedded | 0 | 0 |
| Chainguard | mariadb-11.7-oci-entrypoint | 0 | 0 |
| Chainguard | mariadb-11.7-test | 0 | 0 |
| Chainguard | mariadb-test | 0 | 0 |
| Debian:11 | mariadb-10.5 | 0 | No fix |
| Debian:12 | mariadb | 0 | No fix |
| Debian:13 | mariadb | 0 | No fix |
| Debian:14 | mariadb | 0 | 1:11.8.2-1 |
| Mageia:9 | mariadb | 0 | 11.4.7-1.mga9 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | mariadb | 0 | 10.11.14-150600.4.14.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | mariadb | 0 | 10.11.14-150600.4.14.1 |
| Wolfi | mariadb-10.11 | 0 | 0 |
| Wolfi | mariadb-10.11-backup | 0 | 0 |
| Wolfi | mariadb-10.11-bench | 0 | 0 |
| Wolfi | mariadb-10.11-client | 0 | 0 |
| Wolfi | mariadb-10.11-dev | 0 | 0 |
| Wolfi | mariadb-10.11-doc | 0 | 0 |
| Wolfi | mariadb-10.11-embedded | 0 | 0 |
| Wolfi | mariadb-10.11-oci-entrypoint | 0 | 0 |
| Wolfi | mariadb-10.11-test | 0 | 0 |
| Wolfi | mariadb-11.6 | 0 | 0 |
| Wolfi | mariadb-11.6-backup | 0 | 0 |
| Wolfi | mariadb-11.6-bench | 0 | 0 |
| Wolfi | mariadb-11.6-client | 0 | 0 |
| Wolfi | mariadb-11.6-dev | 0 | 0 |
| Wolfi | mariadb-11.6-doc | 0 | 0 |
| Wolfi | mariadb-11.6-embedded | 0 | 0 |
| Wolfi | mariadb-11.6-oci-entrypoint | 0 | 0 |
| Wolfi | mariadb-11.6-test | 0 | 0 |
| Wolfi | mariadb-11.7 | 0 | 0 |
| Wolfi | mariadb-11.7-backup | 0 | 0 |
| Wolfi | mariadb-11.7-bench | 0 | 0 |
| Wolfi | mariadb-11.7-client | 0 | 0 |
| Wolfi | mariadb-11.7-dev | 0 | 0 |
| Wolfi | mariadb-11.7-doc | 0 | 0 |
| Wolfi | mariadb-11.7-embedded | 0 | 0 |
| Wolfi | mariadb-11.7-oci-entrypoint | 0 | 0 |
| Wolfi | mariadb-11.7-test | 0 | 0 |
| Wolfi | mariadb-test | 0 | 0 |
| openSUSE:Leap 15.6 | mariadb | 0 | 10.11.14-150600.4.14.1 |
Related vulnerabilities
- CVE-2025-30722 Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Also affects mariadb
- CVE-2023-52969 MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0… Also affects mariadb
- CVE-2023-52971 MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in… Also affects mariadb
- CVE-2023-52970 MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0… Also affects mariadb
- CVE-2025-21490 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Also affects mariadb
- CVE-2025-5399 Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly… Also affects mysql-selinux
- CVE-2025-30715 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components… Also affects mysql-selinux
- CVE-2025-30721 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Also affects mysql-selinux