Description
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Client accessible data as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | MySQL Cluster | 7.6.0 – ≤ 7.6.33, 8.0.0 – ≤ 8.0.41, 8.4.0 – ≤ 8.4.4, 9.0.0 – ≤ 9.2.0 | — |
| Oracle | MySQL Client | 8.0.0 – ≤ 8.0.41, 8.4.0 – ≤ 8.4.4, 9.0.0 – ≤ 9.2.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mariadb | 1:11.8.2-1 | — |
| Debian 13 | mariadb | 1:11.8.2-1 | — |
| Debian 12 | mariadb | 1:10.11.13-0+deb12u1 | — |
| Debian 11 | mariadb-10.5 | 1:10.5.29-0+deb11u1 | DLA-4208-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | mysql-8.4 | 8.4.5-0ubuntu1 | — |
| Ubuntu 24.04 LTS | mariadb | 1:10.11.13-0ubuntu0.24.04.1 | USN-7548-1 |
| Ubuntu 24.04 LTS | mysql-8.0 | 8.0.42-0ubuntu0.24.04.1 | USN-7479-1 |
| Ubuntu 22.04 LTS | mariadb-10.6 | 1:10.6.22-0ubuntu0.22.04.1 | USN-7519-1 |
| Ubuntu 22.04 LTS | mysql-8.0 | 8.0.42-0ubuntu0.22.04.1 | USN-7479-1 |
| Ubuntu 20.04 LTS | mariadb-10.3 | No fix yet | — |
| Ubuntu 20.04 LTS | mysql-8.0 | 8.0.42-0ubuntu0.20.04.1 | USN-7479-1 |
| Ubuntu 18.04 LTS | mariadb-10.1 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | mariadb-10.0 +2 | No fix yet | — |
| Ubuntu 14.04 LTS | mysql-5.5 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | mysql-5.7 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | mysql-5.7 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | mariadb +15 | 3:10.11.15-1.el10_1 | RHSA-2026:0136 |
| RHEL 10 | mysql-selinux | 1.0.14-1.el10_0 | RHSA-2025:15699 |
| RHEL 10 | mysql8.4 +7 | 8.4.6-2.el10_0 | RHSA-2025:15699 |
| RHEL 9 | galera | 26.4.20-1.module+el9.5.0+22578+dc54e53f | RHSA-2026:0247, RHSA-2025:19584 |
| RHEL 9 | mariadb +13 | 3:10.5.29-2.el9_6 | RHSA-2026:0247, RHSA-2025:19584 |
| RHEL 9 | mecab +1 | 0.996-3.module+el9.6.0+22713+cbf15e23.4 | RHSA-2025:16046 |
| RHEL 9 | mecab-ipadic +1 | 2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23 | RHSA-2025:16046 |
| RHEL 9 | mysql +6 | 8.0.43-1.el9_6 | RHSA-2025:16086, RHSA-2025:16046 |
| RHEL 9 | mysql-test-data | 8.4.6-1.module+el9.6.0+23497+d0c5dcca | RHSA-2025:16046 |
| RHEL 9 | rapidjson +2 | 1.1.0-19.module+el9.6.0+22713+cbf15e23 | RHSA-2025:16046 |
| RHEL 8 | Judy | 1.0.5-18.module+el8.10.0+21221+7bee72c1 | RHSA-2026:6435, RHSA-2025:19572 |
| RHEL 8 | galera | 26.4.22-1.module+el8.10.0+23546+c942e1d0 | RHSA-2026:6435, RHSA-2025:19572 |
| RHEL 8 | mariadb +13 | 3:10.5.29-2.module+el8.10.0+23547+977c7465 | RHSA-2026:6435, RHSA-2025:19572 |
| RHEL 8 | mecab +1 | 0.996-2.module+el8.10.0+22857+7f331edd | RHSA-2025:16861 |
| RHEL 8 | mecab-ipadic +1 | 2.7.0.20070801-17.module+el8.10.0+22857+7f331edd | RHSA-2025:16861 |
| RHEL 8 | mysql +6 | 8.0.43-1.module+el8.10.0+23526+fabc920a | RHSA-2025:16861 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | mariadb +15 | 3:10.11.15-1.el10_0 | RHSA-2026:49522, RHSA-2026:0376 |
| RHEL 9.6 EUS | galera | 26.4.20-1.module+el9.5.0+22578+dc54e53f | RHSA-2026:0334 |
| RHEL 9.6 EUS | mariadb +13 | 3:10.11.15-1.module+el9.6.0+23803+16eaad56 | RHSA-2026:0334 |
| RHEL 9.4 EUS | galera | 26.4.16-1.module+el9.4.0+21205+b026b850 | RHSA-2026:0335 |
| RHEL 9.4 EUS | mariadb +13 | 3:10.11.15-1.module+el9.4.0+23801+22792e5c | RHSA-2026:0335 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | mariadb-common +1 | 3:10.11.15-1.el10_1 | ALSA-2026:0136 |
| AlmaLinux 10 | mysql-selinux | 1.0.14-1.el10_0 | ALSA-2025:15699 |
| AlmaLinux 10 | mysql8.4-common +2 | 8.4.6-2.el10_0 | ALSA-2025:15699 |
| AlmaLinux 9 | galera | 26.4.20-1.module_el9.5.0+135+c9657a87 | ALSA-2026:0247, ALSA-2025:19584 |
| AlmaLinux 9 | mariadb +13 | 3:10.5.29-2.el9_6 | ALSA-2026:0247, ALSA-2025:19584 |
| AlmaLinux 9 | mecab +1 | 0.996-3.module_el9.6.0+152+8cbce00c.4 | ALSA-2025:16046 |
| AlmaLinux 9 | mecab-ipadic +1 | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c | ALSA-2025:16046 |
| AlmaLinux 9 | mysql +6 | 8.0.43-1.el9_6 | ALSA-2025:16086, ALSA-2025:16046 |
| AlmaLinux 9 | mysql-test-data | 8.4.6-1.module_el9.6.0+180+a4e757e5 | ALSA-2025:16046 |
| AlmaLinux 9 | rapidjson-doc +1 | 1.1.0-19.module_el9.6.0+152+8cbce00c | ALSA-2025:16046 |
| AlmaLinux 8 | Judy | 1.0.5-18.module_el8.8.0+3620+5d452900 | ALSA-2026:6435, ALSA-2025:19572 |
| AlmaLinux 8 | galera | 26.4.22-1.module_el8.10.0+4059+10818090 | ALSA-2026:6435, ALSA-2025:19572 |
| AlmaLinux 8 | mariadb +13 | 3:10.5.29-2.module_el8.10.0+4059+10818090 | ALSA-2026:6435, ALSA-2025:19572 |
| AlmaLinux 8 | mecab +1 | 0.996-2.module_el8.6.0+3340+d764b636 | ALSA-2025:16861 |
| AlmaLinux 8 | mecab-ipadic +1 | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 | ALSA-2025:16861 |
| AlmaLinux 8 | mysql +6 | 8.0.43-1.module_el8.10.0+4049+06e4dcce | ALSA-2025:16861 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | mariadb10.11 | 3:10.11.15-1.el10_1 | RLSA-2026:0136 |
| Rocky Linux 10 | mysql-selinux | 1.0.14-1.el10_0 | RLSA-2025:15699 |
| Rocky Linux 10 | mysql8.4 | 8.4.6-2.el10_0 | RLSA-2025:15699 |
| Rocky Linux 9 | galera | 26.4.20-1.module+el9.7.0+40024+12a6f3b4 | RLSA-2026:0247, RLSA-2025:19584 |
| Rocky Linux 9 | mariadb | 3:10.5.29-2.el9_6 | RLSA-2026:0247, RLSA-2025:19584 |
| Rocky Linux 9 | mecab | 0.996-3.module+el9.7.0+40027+0df0d4e0.4 | RLSA-2025:16046 |
| Rocky Linux 9 | mecab-ipadic | 2.7.0.20070801-24.module+el9.7.0+40027+0df0d4e0 | RLSA-2025:16046 |
| Rocky Linux 9 | mysql | 8.0.43-1.el9_6 | RLSA-2025:16086, RLSA-2025:16046 |
| Rocky Linux 9 | rapidjson | 1.1.0-19.module+el9.7.0+40027+0df0d4e0 | RLSA-2025:16046 |
| Rocky Linux 8 | Judy | 1.0.5-18.module+el8.4.0+427+adf35707 | RLSA-2026:6435, RLSA-2025:19572 |
| Rocky Linux 8 | galera | 26.4.22-1.module+el8.10.0+2082+43759dcc | RLSA-2025:19572 |
| Rocky Linux 8 | mariadb | 3:10.5.29-2.module+el8.10.0+2082+43759dcc | RLSA-2025:19572 |
| Rocky Linux 8 | mecab | 0.996-2.module+el8.10.0+1676+9b4b6e24 | RLSA-2025:16861 |
| Rocky Linux 8 | mecab-ipadic | 2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83 | RLSA-2025:16861 |
| Rocky Linux 8 | mysql | 8.0.43-1.module+el8.10.0+2065+e68efcea.0.1 | RLSA-2025:16861 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | mariadb | 10.11.14-150600.4.14.1 | SUSE-SU-2025:03275-1 |
| SLES 15 SP3 | mariadb | 10.5.29-150300.3.55.1 | SUSE-SU-2025:4491-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP3 | mariadb | 10.5.29-150300.3.55.1 | SUSE-SU-2025:4491-1 |
| SLE HPC 15 SP3 | mariadb | 10.5.29-150300.3.55.1 | SUSE-SU-2025:4491-1 |
| SUSE Enterprise Storage 7.1 | mariadb | 10.5.29-150300.3.55.1 | SUSE-SU-2025:4491-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | mariadb | 10.11.14-150600.4.14.1 | SUSE-SU-2025:03275-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | mariadb1011 +15 | 3:10.11.13-1.amzn2023.0.1 | ALAS2023-2025-1071 |
| Amazon Linux 2023 | mariadb105 +14 | 3:10.5.29-1.amzn2023.0.1 | ALAS2023-2025-990 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | mariadb +14 | 3:10.11.15-1.el10_1 | ELSA-2026-0136 |
| Oracle Linux 10 | mysql-selinux | 1.0.14-1.el10_0 | ELSA-2025-15699 |
| Oracle Linux 10 | mysql8.4 +7 | 8.4.6-2.el10_0 | ELSA-2025-15699 |
| Oracle Linux 9 | galera | 26.4.20-1.0.1.module+el9.5.0+90507+82ceef20 | ELSA-2026-0247, ELSA-2025-19584 |
| Oracle Linux 9 | mariadb +13 | 3:10.5.29-2.el9_6 | ELSA-2026-0247, ELSA-2025-19584 |
| Oracle Linux 9 | mecab +1 | 0.996-3.module+el9.6.0+90535+0c73839a.4 | ELSA-2025-16046 |
| Oracle Linux 9 | mecab-ipadic +1 | 2.7.0.20070801-24.0.1.module+el9.6.0+90535+0c73839a | ELSA-2025-16046 |
| Oracle Linux 9 | mysql +6 | 8.0.43-1.el9_6 | ELSA-2025-16086, ELSA-2025-16046 |
| Oracle Linux 9 | mysql-test-data | 8.4.6-1.module+el9.6.0+90673+e6b08fe8 | ELSA-2025-16046 |
| Oracle Linux 9 | rapidjson-doc +1 | 1.1.0-19.module+el9.6.0+90535+0c73839a | ELSA-2025-16046 |
| Oracle Linux 8 | Judy | 1.0.5-18.module+el8.10.0+90697+4b5f4cdd | ELSA-2026-6435, ELSA-2025-19572 |
| Oracle Linux 8 | galera | 26.4.22-1.module+el8.10.0+90697+4b5f4cdd | ELSA-2026-6435, ELSA-2025-19572 |
| Oracle Linux 8 | mariadb +13 | 3:10.5.29-2.module+el8.10.0+90697+4b5f4cdd | ELSA-2026-6435, ELSA-2025-19572 |
| Oracle Linux 8 | mecab +1 | 0.996-2.module+el8.10.0+90675+bf1d9af8 | ELSA-2025-16861 |
| Oracle Linux 8 | mecab-ipadic +1 | 2.7.0.20070801-17.0.1.module+el8.10.0+90675+bf1d9af8 | ELSA-2025-16861 |
| Oracle Linux 8 | mysql +6 | 8.0.43-1.module+el8.10.0+90675+bf1d9af8 | ELSA-2025-16861 |
Advisories 50
- WID-SEC-2025-0813 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- ALSA-2026:0136 Important: mariadb10.11 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:0247 Important: mariadb:10.11 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:16046 Moderate: mysql:8.4 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:19584 Moderate: galera and mariadb security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:16086 Moderate: mysql security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:15699 Moderate: mysql-selinux and mysql8.4 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:6435 Moderate: mariadb:10.11 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:16861 Moderate: mysql:8.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:19572 Moderate: mariadb:10.5 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:16861 Red Hat Security Advisory: mysql:8.0 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:16086 Red Hat Security Advisory: mysql security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:16046 Red Hat Security Advisory: mysql:8.4 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:15699 Red Hat Security Advisory: mysql-selinux and mysql8.4 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:6435 Red Hat Security Advisory: mariadb:10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:49522 Red Hat Security Advisory: mariadb10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:0376 Red Hat Security Advisory: mariadb10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:0335 Red Hat Security Advisory: mariadb:10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:0334 Red Hat Security Advisory: mariadb:10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:0247 Red Hat Security Advisory: mariadb:10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:0136 Red Hat Security Advisory: mariadb10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:19572 Red Hat Security Advisory: mariadb:10.5 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:19584 Red Hat Security Advisory: galera and mariadb security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- USN-7519-1 mariadb-10.6 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7548-1 mariadb vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7479-1 mysql-8.0, mysql-8.4 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- RLSA-2026:6435 Moderate: mariadb:10.11 security update Rocky Linux Security Advisories · Apr 2, 2026
- ELSA-2026-6435 Moderate: mariadb:10.11 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 2, 2026
- SUSE-SU-2025:4491-1 Security update for mariadb SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03275-1 Security update for mariadb SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-4208-1 mariadb-10.5 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2026:0247 Important: mariadb:10.11 security update Rocky Linux Security Advisories · Jan 9, 2026
- RLSA-2026:0136 Important: mariadb10.11 security update Rocky Linux Security Advisories · Jan 9, 2026
- ELSA-2026-0247 Important: mariadb:10.11 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jan 9, 2026
- ELSA-2026-0136 Important: mariadb10.11 security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jan 6, 2026
- RLSA-2025:16861 Moderate: mysql:8.0 security update Rocky Linux Security Advisories · Dec 2, 2025
- RLSA-2025:16046 Moderate: mysql:8.4 security update Rocky Linux Security Advisories · Dec 2, 2025
- RLSA-2025:19572 Moderate: mariadb:10.5 security update Rocky Linux Security Advisories · Dec 2, 2025
- WID-SEC-2025-1850 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Nov 17, 2025
- RLSA-2025:19584 Moderate: galera and mariadb security update Rocky Linux Security Advisories · Nov 6, 2025
- ELSA-2025-19572 Moderate: mariadb:10.5 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 5, 2025
- ELSA-2025-19584 Moderate: galera and mariadb security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 5, 2025
- RLSA-2025:16086 Moderate: mysql security update Rocky Linux Security Advisories · Oct 10, 2025
- RLSA-2025:15699 Moderate: mysql-selinux and mysql8.4 security update Rocky Linux Security Advisories · Oct 8, 2025
- ELSA-2025-16861 Moderate: mysql:8.0 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 29, 2025
- ELSA-2025-16086 Moderate: mysql security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 22, 2025
- ELSA-2025-16046 Moderate: mysql:8.4 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 17, 2025
- ELSA-2025-15699 Moderate: mysql-selinux and mysql8.4 security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Sep 11, 2025
- ALAS2023-2025-1071 Moderate: mariadb1011 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jul 10, 2025
- ALAS2023-2025-990 Moderate: mariadb105 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 5, 2025
References
- Oracle Advisory vendor-advisory