CVE-2025-21490 | Vulnetix

CVE-2025-21490 PUBLISHED CVSS 4.900000095367432 MEDIUM

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

EPSS 1.28% · 69.8th percentile

Risk Scores

CVSS 3.1

4.900000095367432

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS Score

1.28%

69.8th percentile

Affected Products

Vendor	Product	Versions
Bitnami	mariadb-min	11.5.0, 11.5.0, 0
Bitnami	mariadb	10.6.0, 11.0.0, 11.5.0
Bitnami	mariadb-min	11.5.0, 0
Bitnami	mysql-client	11.0.0, 11.5.0, 0
Bitnami	mysql-client	11.5.0, 0, 10.7.0
Bitnami	mariadb	11.5.0, 0, 10.6.0

Timeline

Jan 17, 2025 CVE Published
Jan 21, 2025 Coalition ESS Score
Jan 22, 2025 EPSS Score
Jan 22, 2025 Coalition ESS Score
Feb 7, 2025 EPSS Score
Feb 16, 2025 Coalition ESS Score
Feb 22, 2025 Coalition ESS Score
Feb 23, 2025 EPSS Score
Mar 11, 2025 EPSS Score
Mar 18, 2025 Coalition ESS Score
Mar 27, 2025 EPSS Score
Apr 10, 2025 Coalition ESS Score

References

Open in Interactive Console →