UBUNTU-CVE-2025-30224

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2025-30224
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-30224.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-30224
Related
Published
2025-04-01T15:16:00Z
Modified
2025-04-23T15:12:57Z
Summary
[none]
Details

MyDumper is a MySQL Logical Backup Tool. The MySQL C client library (libmysqlclient) allows authenticated remote actors to read arbitrary files from client systems via a crafted server response to LOAD LOCAL INFILE query, leading to sensitive information disclosure when clients connect to untrusted MySQL servers without explicitly disabling the local infile capability. Mydumper has the local infile option enabled by default and does not have an option to disable it. This can lead to an unexpected arbitrary file read if the Mydumper tool connects to an untrusted server. This vulnerability is fixed in 0.18.2-8.

References

Affected packages

Ubuntu:Pro:16.04:LTS / mydumper

Package

Name
mydumper
Purl
pkg:deb/ubuntu/mydumper@0.9.1-1build1?arch=source&distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.6.1-1
0.9.1-1
0.9.1-1build1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / mydumper

Package

Name
mydumper
Purl
pkg:deb/ubuntu/mydumper@0.9.1-5?arch=source&distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.9.1-5

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / mydumper

Package

Name
mydumper
Purl
pkg:deb/ubuntu/mydumper@0.9.5-1.1?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.9.5-1build2
0.9.5-1.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / mydumper

Package

Name
mydumper
Purl
pkg:deb/ubuntu/mydumper@0.10.1-1ubuntu1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.1-1ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / mydumper

Package

Name
mydumper
Purl
pkg:deb/ubuntu/mydumper@0.10.1-1ubuntu3?arch=source&distro=oracular

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.1-1ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / mydumper

Package

Name
mydumper
Purl
pkg:deb/ubuntu/mydumper@0.10.1-1ubuntu3?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.1-1ubuntu1
0.10.1-1ubuntu2
0.10.1-1ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:25.04 / mydumper

Package

Name
mydumper
Purl
pkg:deb/ubuntu/mydumper@0.10.1-1ubuntu4?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.1-1ubuntu3
0.10.1-1ubuntu4

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}