Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-56498.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-56498
Upstream
Published
2025-02-05T10:15:22Z
Modified
2026-04-01T05:18:54.823734Z
Summary
CVE-2025-0725 affecting package mysql for versions less than 8.0.42-1
Details

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the CURLOPT_ACCEPT_ENCODING option, using zlib 1.2.0.3 or older, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

References

Affected packages

Azure Linux:3 / mysql

Package

Name
mysql
Purl
pkg:rpm/azure-linux/mysql

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.0.42-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-56498.json"