rpm package

almalinux/mysql-server

pkg:rpm/almalinux/mysql-server

Vulnerabilities (534)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2025-21546	Low	3.8	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network acc
CVE-2025-21543	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mul
CVE-2025-21540	Med	5.4	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network acce
CVE-2025-21536	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mul
CVE-2025-21534	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network acces
CVE-2025-21531	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto
CVE-2025-21529	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network acces
CVE-2025-21525	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple
CVE-2025-21523	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto
CVE-2025-21522	Med	6.5	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multipl
CVE-2025-21521	Hig	7.5	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
CVE-2025-21520	Low	1.8	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastru
CVE-2025-21519	Med	4.4	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network a
CVE-2025-21518	Med	6.5	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult
CVE-2025-21505	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network acce
CVE-2025-21504	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mul
CVE-2025-21503	Med	4.9	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto
CVE-2025-21501	Med	6.5	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult
CVE-2025-21500	Med	6.5	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult
CVE-2025-21497	Med	5.5	< 8.0.41-2.el9_5	8.0.41-2.el9_5	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto

CVE-2025-21546LowJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network acc
CVE-2025-21543MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mul
CVE-2025-21540MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network acce
CVE-2025-21536MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mul
CVE-2025-21534MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network acces
CVE-2025-21531MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto
CVE-2025-21529MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network acces
CVE-2025-21525MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple
CVE-2025-21523MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto
CVE-2025-21522MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multipl
CVE-2025-21521HigJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
CVE-2025-21520LowJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastru
CVE-2025-21519MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network a
CVE-2025-21518MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult
CVE-2025-21505MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network acce
CVE-2025-21504MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mul
CVE-2025-21503MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto
CVE-2025-21501MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult
CVE-2025-21500MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult
CVE-2025-21497MedJan 21, 2025
affected < 8.0.41-2.el9_5fixed 8.0.41-2.el9_5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto

Page 7 of 27