Fluid Attacks Database

Description

A flaw was found in MySQL Server (Thread Pooling component). This vulnerability allows a denial of service (DoS) via network access through multiple protocols by an unauthenticated attacker.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel8	mysql	<0:8.0.41-1.module+el8.10.0+22857+7f331edd	0:8.0.41-1.module+el8.10.0+22857+7f331edd
rpm rhel9.4	mysql	<0:8.0.40-1.el9_4	0:8.0.40-1.el9_4
rpm rhel10	mysql8.4	<0:8.4.4-2.el10	0:8.4.4-2.el10
rpm rhel8.8	mysql	<0:8.0.40-1.module+el8.8.0+22863+a1071e1e	0:8.0.40-1.module+el8.8.0+22863+a1071e1e
rpm rhel9	mysql	<0:8.0.41-2.el9_5	0:8.0.41-2.el9_5
rpm rhel9.2	mysql	<0:8.0.40-1.el9_2.1	0:8.0.40-1.el9_2.1

Aliases

1. CVE-2025-215212. NVD-2025-215213. OSV-2025-21521

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.