Bug#1093881: mysql-connector-python: CVE-2025-21548

From	Moritz Mühlenhoff <jmm@inutil.org>
Newsgroups	linux.debian.bugs.rc
Subject	Bug#1093881: mysql-connector-python: CVE-2025-21548
Date	2025-01-23 20:10 +0100
Message-ID	<K8aKu-bhtR-49@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Source: mysql-connector-python
X-Debbugs-CC: team@security.debian.org
Severity: grave
Tags: security

Hi,

The following vulnerability was published for mysql-connector-python.

CVE-2025-21548[0]:
| Vulnerability in the MySQL Connectors product of Oracle MySQL
| (component: Connector/Python).  Supported versions that are affected
| are 9.1.0 and prior. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Connectors.  Successful attacks require human
| interaction from a person other than the attacker. Successful
| attacks of this vulnerability can result in  unauthorized creation,
| deletion or modification access to critical data or all MySQL
| Connectors accessible data as well as  unauthorized read access to a
| subset of MySQL Connectors accessible data and unauthorized ability
| to cause a hang or frequently repeatable crash (complete DOS) of
| MySQL Connectors. CVSS 3.1 Base Score 6.4 (Confidentiality,
| Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H).

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-21548
    https://www.cve.org/CVERecord?id=CVE-2025-21548

Please adjust the affected versions in the BTS as needed.

Back to linux.debian.bugs.rc | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1093881: mysql-connector-python: CVE-2025-21548 Moritz Mühlenhoff <jmm@inutil.org> - 2025-01-23 20:10 +0100
  Processed: Bug#1093881 marked as pending in mysql-connector-python "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-03-17 11:50 +0100
  Bug#1093881: marked as pending in mysql-connector-python Colin Watson <cjwatson@debian.org> - 2025-03-17 11:50 +0100
  Bug#1093881: marked as done (mysql-connector-python: CVE-2025-21548) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-03-17 12:00 +0100

csiph-web