CVE-2025-50103: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth) affects versions 9.0.0-9.3.0. This vulnerability was disclosed on July 15, 2025, and requires a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. The vulnerability is classified as difficult to exploit (Oracle CPE).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.4 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H. The attack requires network access and high privileges, with high attack complexity. The scope is unchanged, and while there are no confidentiality or integrity impacts, the availability impact is rated as high (Oracle CPE, NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. The impact is limited to availability with no effect on confidentiality or integrity of the system (Oracle CPE).

Oracle has addressed this vulnerability in their July 2025 Critical Patch Update. Users are strongly advised to update their MySQL Server installations to the latest patched versions. The vulnerability affects versions 9.0.0-9.3.0, and users should upgrade to a patched version as soon as possible (Oracle CPE).