CVE-2025-30693

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and...

Original description

The description as published by the source.

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami mariadb-min

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"11.4.7"},{"introduced":"11.5.0"},{"fixed":"11.8.2"}]}]

Bitnami mysql-client

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"10.6.22"},{"introduced":"10.7.0"},{"fixed":"11.4.6"},{"introduced":"11.5.0"},{"fixed":"11.8.2"}]}]

Bitnami mariadb

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"10.5.29"},{"introduced":"10.6.0"},{"fixed":"10.6.22"},{"introduced":"10.7.0"},{"fixed":"11.4.6"},{"introduced":"11.5.0"},{"fixed":"11.8.2"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

BellSoft Alpaquita BELL-CVE-2025-30693 mariadb Fixed in: 10.6.22-r0
Debian DEBIAN-CVE-2025-30693 mariadb Fixed in: 1:10.11.13-0+deb12u1

Original description

Affected packages

Fix status by distribution

References