CVE-2025-30682: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) affects versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. This vulnerability was disclosed on April 15, 2025, and is tracked as CVE-2025-30682. The vulnerability allows low privileged attackers with network access via multiple protocols to compromise MySQL Server (Oracle CPU, NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 6.5 (Medium severity) with the vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The attack requires low complexity and low privileges, can be executed remotely over the network, and does not require user interaction. The scope is unchanged, with no impact on confidentiality or integrity, but has a high impact on availability (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. The vulnerability primarily affects the availability of the system, with no direct impact on data confidentiality or integrity (Oracle CPU).

Oracle has released patches for this vulnerability as part of the April 2025 Critical Patch Update. Organizations are strongly recommended to apply these security patches as soon as possible to affected MySQL Server versions (Oracle CPU).