The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected     are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of MySQL Server accessible data. (CVE-2025-53054)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected     are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of MySQL Server accessible data. (CVE-2025-53053)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are     affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result     in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2025-53040)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23008 advisory.

    [8.4.7-1]
    - Rebase to 8.4.7

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23008 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the mysql package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2025-53045)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23111 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23134 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23137 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23109 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23111 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23109 advisory.

    [8.0.44-1]
    - Rebase to MySQL 8.0.44

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23137 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23134 advisory.

    mecab     mecab-ipadic     mysql     [8.0.44-1]
    - Rebase to MySQL 8.0.44

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11541:01 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23111 advisory.

    mecab     mecab-ipadic     mysql     [8.4.7-1]
    - Rebase to 8.4.7

    rapidjson

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23109 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8006-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to     fix these issues.

    MySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:

    https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html https://www.oracle.com/security-     alerts/cpujan2026.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
271374	Oracle MySQL Server 9.x.x < 9.5.0 (October 2025 CPU)	Nessus	Databases	2025/10/24	2026/2/24	medium
271375	Oracle MySQL Server 8.0.x < 8.0.44 (October 2025 CPU)	Nessus	Databases	2025/10/24	2026/2/24	medium
278133	Oracle Linux 10 : mysql8.4 (ELSA-2025-23008)	Nessus	Oracle Linux Local Security Checks	2025/12/10	2025/12/10	medium
278522	RockyLinux 10 : mysql8.4 (RLSA-2025:23008)	Nessus	Rocky Linux Local Security Checks	2025/12/12	2025/12/12	medium
276941	Photon OS 5.0: Mysql PHSA-2025-5.0-0693	Nessus	PhotonOS Local Security Checks	2025/12/1	2026/2/24	medium
276827	Linux Distros Unpatched Vulnerability : CVE-2025-53045	Nessus	Misc.	2025/11/25	2026/7/25	medium
278983	AlmaLinux 9 : mysql:8.4 (ALSA-2025:23111)	Nessus	Alma Linux Local Security Checks	2025/12/17	2025/12/17	medium
278389	RHEL 8 : mysql:8.0 (RHSA-2025:23134)	Nessus	Red Hat Local Security Checks	2025/12/11	2025/12/11	medium
278516	RockyLinux 8 : mysql:8.4 (RLSA-2025:23137)	Nessus	Rocky Linux Local Security Checks	2025/12/12	2025/12/19	medium
278518	RockyLinux 9 : mysql (RLSA-2025:23109)	Nessus	Rocky Linux Local Security Checks	2025/12/12	2025/12/12	medium
278387	RHEL 9 : mysql:8.4 (RHSA-2025:23111)	Nessus	Red Hat Local Security Checks	2025/12/11	2025/12/11	medium
278601	Oracle Linux 9 : mysql (ELSA-2025-23109)	Nessus	Oracle Linux Local Security Checks	2025/12/13	2026/2/24	medium
278557	AlmaLinux 8 : mysql:8.4 (ALSA-2025:23137)	Nessus	Alma Linux Local Security Checks	2025/12/12	2025/12/12	medium
278609	Oracle Linux 8 : mysql:8.0 (ELSA-2025-23134)	Nessus	Oracle Linux Local Security Checks	2025/12/13	2026/2/24	medium
282797	MiracleLinux 8 : mysql:8.4 (AXSA:2025-11541:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	medium
278562	Oracle Linux 9 : mysql:8.4 (ELSA-2025-23111)	Nessus	Oracle Linux Local Security Checks	2025/12/12	2026/2/24	medium
278342	RHEL 9 : mysql (RHSA-2025:23109)	Nessus	Red Hat Local Security Checks	2025/12/11	2025/12/11	medium
271432	Photon OS 4.0: Mysql PHSA-2025-4.0-0894	Nessus	PhotonOS Local Security Checks	2025/10/25	2026/2/24	medium
297946	Ubuntu 20.04 LTS : MySQL vulnerabilities (USN-8006-1)	Nessus	Ubuntu Local Security Checks	2026/2/4	2026/2/4	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium