Cloudanix VulnDB

CVE-2025-30705

None

CVSS

—

EPSS

1.0%

Published

Apr 15, 2025

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A flaw in certain MySQL database versions lets someone with special access rights over the network crash the database, stopping applications that rely on it from working until it is restarted.

Exploitation
Remote Authenticated
Attacker needs
High Privilege
Complexity
Low
Impact
Denial Of Service
Component
Application
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The flaw in the Server: PS component permits a high-privileged network attacker to trigger a hang or repeatable crash, resulting in complete denial of service for the MySQL Server process.

Why it matters to the business

Successful exploitation can interrupt database availability, leading to application outages, halted transactions, and operational downtime for any systems dependent on the affected MySQL versions; the low EPSS and absence from KEV indicate limited immediate widespread risk but still require prompt attention given the 561 days since publication.

How an attack unfolds

An attacker who already possesses high-privileged network credentials connects to the MySQL Server over supported protocols and sends specially crafted requests that abuse the Server: PS component, causing the server to hang or crash repeatedly.

How to fix it

Upgrade affected MySQL Server installations to versions beyond 8.0.41, 8.4.4, and 9.2.0. For the listed linux-azure-fde-5.15 (Ubuntu:20.04:LTS) packages apply the fixed version 5.15.0-1073.82~20.04.1.1.

How to confirm the fix worked

Verify MySQL Server version numbers after patching; attempt authenticated connections with high-privileged accounts to confirm the server no longer crashes under previously triggering conditions; review release notes for the specific fixed versions.

Typical attack path

  1. Obtain or compromise high-privileged MySQL credentials with network access
  2. Establish a connection using one of the supported protocols
  3. Transmit crafted input targeting the Server: PS component
  4. Trigger repeated server hangs or crashes to sustain denial of service

How to detect it

Examine database logs and system event logs for repeated unexpected shutdowns or crash entries around the time of high-privileged connections; correlate with authentication events from privileged accounts.

What your security team should do

  • Prioritize patching MySQL instances to the fixed versions within maintenance windows
  • Review and restrict high-privileged network access to only necessary hosts
  • Monitor EPSS trend for any further increase and reassess if exploit maturity changes

The record

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:10 mysql-selinux 0 1.0.14-1.el10_0
AlmaLinux:10 mysql8.4 0 8.4.6-2.el10_0
AlmaLinux:10 mysql8.4-common 0 8.4.6-2.el10_0
AlmaLinux:10 mysql8.4-devel 0 8.4.6-2.el10_0
AlmaLinux:10 mysql8.4-errmsg 0 8.4.6-2.el10_0
AlmaLinux:10 mysql8.4-libs 0 8.4.6-2.el10_0
AlmaLinux:10 mysql8.4-server 0 8.4.6-2.el10_0
AlmaLinux:10 mysql8.4-test 0 8.4.6-2.el10_0
AlmaLinux:10 mysql8.4-test-data 0 8.4.6-2.el10_0
AlmaLinux:8 mecab 0 0.996-2.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab 0 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux:8 mecab-devel 0 0.996-2.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab-devel 0 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux:8 mecab-ipadic 0 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
AlmaLinux:8 mecab-ipadic-EUCJP 0 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
AlmaLinux:8 mysql 0 8.0.43-1.module_el8.10.0+4049+06e4dcce
AlmaLinux:8 mysql-common 0 8.0.43-1.module_el8.10.0+4049+06e4dcce
AlmaLinux:8 mysql-devel 0 8.0.43-1.module_el8.10.0+4049+06e4dcce
AlmaLinux:8 mysql-errmsg 0 8.0.43-1.module_el8.10.0+4049+06e4dcce
AlmaLinux:8 mysql-libs 0 8.0.43-1.module_el8.10.0+4049+06e4dcce
AlmaLinux:8 mysql-server 0 8.0.43-1.module_el8.10.0+4049+06e4dcce
AlmaLinux:8 mysql-test 0 8.0.43-1.module_el8.10.0+4049+06e4dcce
AlmaLinux:9 mecab 0 0.996-3.module_el9.6.0+152+8cbce00c.4
AlmaLinux:9 mecab-devel 0 0.996-3.module_el9.6.0+152+8cbce00c.4
AlmaLinux:9 mecab-ipadic 0 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c
AlmaLinux:9 mecab-ipadic-EUCJP 0 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c
AlmaLinux:9 mysql 0 8.4.6-1.module_el9.6.0+180+a4e757e5
AlmaLinux:9 mysql 0 8.0.43-1.el9_6
AlmaLinux:9 mysql-common 0 8.4.6-1.module_el9.6.0+180+a4e757e5
AlmaLinux:9 mysql-common 0 8.0.43-1.el9_6
AlmaLinux:9 mysql-devel 0 8.4.6-1.module_el9.6.0+180+a4e757e5
AlmaLinux:9 mysql-devel 0 8.0.43-1.el9_6
AlmaLinux:9 mysql-errmsg 0 8.4.6-1.module_el9.6.0+180+a4e757e5
AlmaLinux:9 mysql-errmsg 0 8.0.43-1.el9_6
AlmaLinux:9 mysql-libs 0 8.4.6-1.module_el9.6.0+180+a4e757e5
AlmaLinux:9 mysql-libs 0 8.0.43-1.el9_6
AlmaLinux:9 mysql-server 0 8.4.6-1.module_el9.6.0+180+a4e757e5
AlmaLinux:9 mysql-server 0 8.0.43-1.el9_6
AlmaLinux:9 mysql-test 0 8.4.6-1.module_el9.6.0+180+a4e757e5
AlmaLinux:9 mysql-test 0 8.0.43-1.el9_6
AlmaLinux:9 mysql-test-data 0 8.4.6-1.module_el9.6.0+180+a4e757e5
AlmaLinux:9 rapidjson-devel 0 1.1.0-19.module_el9.6.0+152+8cbce00c
AlmaLinux:9 rapidjson-doc 0 1.1.0-19.module_el9.6.0+152+8cbce00c

Related vulnerabilities