Volerion logoVolerion
Volerion logoVolerion

Oracle MySQL Server InnoDB Component Denial-of-Service and Data Manipulation Vulnerability

Vulnerability

A vulnerability exists in the InnoDB component of Oracle MySQL Server, affecting versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This vulnerability allows a high-privileged attacker with network access to MySQL Server to cause a complete denial-of-service by hanging or crashing the server. Additionally, the vulnerability permits unauthorized access to manipulate some of the data accessible to MySQL Server.

Impact

Exploitation of this vulnerability leads to a complete denial-of-service on the MySQL Server, causing it to hang or crash frequently. Furthermore, it allows unauthorized updates, inserts, or deletions of some data accessible to MySQL Server.

Remediation

Users can apply the January 2025 Critical Patch Update, which includes a patch for this vulnerability. Instructions for applying the patch can be found in the MySQL Critical Patch Update January 2025 Patch Availability Document on My Oracle Support.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.7
impact
3.8
exploitability
4.4
remediation
8.3
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.