CVE Database
/

CVE-2019-2938

Back to search

CVE-2019-2938

Published: Oct 16, 2019

Modified: Oct 1, 2024

PUBLISHED

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

VendorProductVersions

Oracle Corporation

MySQL Server

affected
5.7.27 and prior
affected
8.0.17 and prior

References

FEDORA-2019-c1fab3f139
vendor-advisory
x_refsource_FEDORA
FEDORA-2019-d40df38271
vendor-advisory
x_refsource_FEDORA
FEDORA-2019-48a0a07033
vendor-advisory
x_refsource_FEDORA
USN-4195-1
vendor-advisory
x_refsource_UBUNTU
USN-4195-2
vendor-advisory
x_refsource_UBUNTU
openSUSE-SU-2019:2698
vendor-advisory
x_refsource_SUSE
GLSA-202105-27
vendor-advisory
x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now