Skip to content
OpenAdvisories
Unscored CVE-2019-2811 EUVD-2019-12450GHSA-pxpf-f7wc-5qvm

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affec…

Published Jul 23, 2019 · Updated Oct 1, 2024 · Assigned by oracle

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected products

VendorProductAffectedFixed
Oracle MySQL Server 8.0.16 and prior —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
RHEL 8 mecab 0.996-1.module+el8.0.0+3898+e09bb8de.9 RHSA-2019:2511
RHEL 8 mecab-ipadic +1 2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de RHSA-2019:2511
RHEL 8 mysql +6 8.0.17-3.module+el8.0.0+3898+e09bb8de RHSA-2019:2511
RHEL 3 rh-mysql80-mysql +9 8.0.17-1.el7 RHSA-2019:2484

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 mecab 0.996-1.module_el8.4.0+2532+b8928c02.9 ALSA-2019:2511
AlmaLinux 8 mecab-ipadic +1 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 ALSA-2019:2511

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 mecab 0.996-1.module+el8.3.0+242+87d3366a.9 RLSA-2019:2511
Rocky Linux 8 mecab-ipadic 2.7.0.20070801-16.module+el8.3.0+242+87d3366a RLSA-2019:2511

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 mecab 0.996-1.module+el8.0.0+5253+1dce7bb2.9 ELSA-2019-2511
Oracle Linux 8 mecab-ipadic +1 2.7.0.20070801-16.0.1.module+el8.0.0+5253+1dce7bb2 ELSA-2019-2511
Oracle Linux 8 mysql +6 8.0.17-3.module+el8.0.0+5253+1dce7bb2 ELSA-2019-2511

Advisories 5

References