Fluid Attacks Database

Description

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Client accessible data as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N).

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	mariadb	=1:10.11.11-0+deb12u1 \|\| =1:10.11.3-1 \|\| =1:10.11.3-2~exp1 \|\| =1:10.11.4-1 \|\| =1:10.11.4-1~deb12u1 \|\| =1:10.11.5-1 \|\| =1:10.11.5-2 \|\| =1:10.11.5-3 \|\| =1:10.11.6-0+deb12u1 \|\| =1:10.11.6-1 \|\| =1:10.11.6-2 \|\| =1:10.11.6-2.1~exp1 \|\| =1:10.11.7-1 \|\| =1:10.11.7-2 \|\| =1:10.11.7-3 \|\| =1:10.11.7-4 \|\| =1:10.11.8-1 \|\| =1:10.11.9-0+deb12u1 \|\| >=0 <1:10.11.13-0+deb12u1	1:10.11.13-0+deb12u1
debian 13	mariadb	>=0 <1:11.8.2-1	1:11.8.2-1
debian 14	mariadb	>=0 <1:11.8.2-1	1:11.8.2-1
debian 11	mariadb-10.5	=1:10.5.11-1 \|\| =1:10.5.12-0+deb11u1 \|\| =1:10.5.12-1 \|\| =1:10.5.13-0+deb11u1 \|\| =1:10.5.15-0+deb11u1 \|\| =1:10.5.18-0+deb11u1 \|\| =1:10.5.19-0+deb11u1 \|\| =1:10.5.19-0+deb11u2 \|\| =1:10.5.21-0+deb11u1 \|\| =1:10.5.23-0+deb11u1 \|\| =1:10.5.26-0+deb11u1 \|\| =1:10.5.26-0+deb11u2 \|\| =1:10.5.28-0+deb11u1 \|\| =1:10.5.28-0+deb11u2 \|\| >=0 <1:10.5.29-0+deb11u1	1:10.5.29-0+deb11u1
rpm rhel10	mysql8.4	<0:8.4.6-2.el10_0	0:8.4.6-2.el10_0
rpm rhel8	mariadb	<3:10.11.15-1.module+el8.10.0+24010+d874728a	3:10.11.15-1.module+el8.10.0+24010+d874728a
rpm rhel9	galera	<0:26.4.22-1.el9_6	0:26.4.22-1.el9_6
rpm rhel9.4	mariadb	<3:10.11.15-1.module+el9.4.0+23801+22792e5c	3:10.11.15-1.module+el9.4.0+23801+22792e5c
rpm rhel8	mysql	<0:8.0.43-1.module+el8.10.0+23526+fabc920a	0:8.0.43-1.module+el8.10.0+23526+fabc920a
rpm rhel9	mariadb	<3:10.5.29-2.el9_6	3:10.5.29-2.el9_6

1-10 of 15

Aliases

1. CVE-2025-307222. NVD-2025-307223. OSV-DEBIAN-2025-307224. OSV-2025-307225. SECURITY-TRACKER-CVE-2025-30722

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.