GCVE-110-NCSC-2025-339

Advisory PublishedCVSS 5.3/10

Vulnetix · Advisory published October 23, 2025

Multiple vulnerabilities in Oracle MySQL Server and Cluster, along with libcurl's WebSocket code, allow for various denial of service attacks, with CVSS scores ranging from 4.3 to 7.5.

Download JSON Open in Console

Weaknesses (CWE)

CWE-407Inefficient Algorithmic ComplexityCWE-670Always-Incorrect Control Flow ImplementationCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-125Out-of-bounds ReadCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-197Numeric Truncation ErrorCWE-400Uncontrolled Resource ConsumptionCWE-770Allocation of Resources Without Limits or Throttling

Risk Scores

CVSS 3.1

5.3/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2024-12133 CVE-2024-35195 CVE-2025-4517 CVE-2025-49796 CVE-2025-53040 CVE-2025-53042 CVE-2025-53044 CVE-2025-53045 CVE-2025-53053 CVE-2025-53054 CVE-2025-53062 CVE-2025-53067 CVE-2025-53069 CVE-2025-5318 CVE-2025-5399 CVE-2025-6965

References

advisory

Browse GCVE Records

74,557 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON