Fluid Attacks Database

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	mariadb	=1:10.11.11-0+deb12u1 \|\| =1:10.11.3-1 \|\| =1:10.11.3-2~exp1 \|\| =1:10.11.4-1 \|\| =1:10.11.4-1~deb12u1 \|\| =1:10.11.5-1 \|\| =1:10.11.5-2 \|\| =1:10.11.5-3 \|\| =1:10.11.6-0+deb12u1 \|\| =1:10.11.6-1 \|\| =1:10.11.6-2 \|\| =1:10.11.6-2.1~exp1 \|\| =1:10.11.7-1 \|\| =1:10.11.7-2 \|\| =1:10.11.7-3 \|\| =1:10.11.7-4 \|\| =1:10.11.8-1 \|\| =1:10.11.9-0+deb12u1 \|\| >=0 <1:10.11.13-0+deb12u1	1:10.11.13-0+deb12u1
debian 13	mariadb	>=0 <1:11.8.2-1	1:11.8.2-1
debian 14	mariadb	>=0 <1:11.8.2-1	1:11.8.2-1
debian 11	mariadb-10.5	=1:10.5.11-1 \|\| =1:10.5.12-0+deb11u1 \|\| =1:10.5.12-1 \|\| =1:10.5.13-0+deb11u1 \|\| =1:10.5.15-0+deb11u1 \|\| =1:10.5.18-0+deb11u1 \|\| =1:10.5.19-0+deb11u1 \|\| =1:10.5.19-0+deb11u2 \|\| =1:10.5.21-0+deb11u1 \|\| =1:10.5.23-0+deb11u1 \|\| =1:10.5.26-0+deb11u1 \|\| =1:10.5.26-0+deb11u2 \|\| =1:10.5.28-0+deb11u1 \|\| =1:10.5.28-0+deb11u2 \|\| >=0 <1:10.5.29-0+deb11u1	1:10.5.29-0+deb11u1
rpm rhel10	mysql-selinux	<0:1.0.14-1.el10_0	0:1.0.14-1.el10_0
rpm rhel10.0	mariadb10.11	<3:10.11.15-1.el10_0	3:10.11.15-1.el10_0
rpm rhel9	mysql	<0:8.0.43-1.el9_6	0:8.0.43-1.el9_6
rpm rhel9	galera	<0:26.4.22-1.el9_6	0:26.4.22-1.el9_6
rpm rhel10	mariadb10.11	<3:10.11.15-1.el10_1	3:10.11.15-1.el10_1
rpm rhel8	mysql	<0:8.0.43-1.module+el8.10.0+23526+fabc920a	0:8.0.43-1.module+el8.10.0+23526+fabc920a

1-10 of 15

Aliases

1. CVE-2025-306932. NVD-2025-306933. OSV-DEBIAN-2025-306934. OSV-2025-306935. SECURITY-TRACKER-CVE-2025-30693

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.