Skip to content
OpenAdvisories
Unscored CVE-2019-3003 EUVD-2019-12642GHSA-g972-9mc3-gxh8

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.16 and prior. E…

Published Oct 16, 2019 · Updated Oct 1, 2024 · Assigned by oracle

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected products

VendorProductAffectedFixed
Oracle MySQL Server 8.0.16 and prior —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS mysql-8.0 8.0.18-0ubuntu3 —
Ubuntu 18.04 LTS mysql-5.7 5.7.28-0ubuntu0.18.04.4 USN-4195-1
Ubuntu 16.04 LTS mysql-5.7 5.7.28-0ubuntu0.16.04.2 USN-4195-1
Ubuntu 14.04 LTS mysql-5.5 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 8 mecab 0.996-1.module+el8.0.0+3898+e09bb8de.9 RHSA-2019:2511
RHEL 8 mecab-ipadic +1 2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de RHSA-2019:2511
RHEL 8 mysql +6 8.0.17-3.module+el8.0.0+3898+e09bb8de RHSA-2019:2511
RHEL 3 rh-mysql80-mysql +9 8.0.17-1.el7 RHSA-2019:2484

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 mecab 0.996-1.module_el8.4.0+2532+b8928c02.9 ALSA-2019:2511
AlmaLinux 8 mecab-ipadic +1 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 ALSA-2019:2511

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 mecab 0.996-1.module+el8.3.0+242+87d3366a.9 RLSA-2019:2511
Rocky Linux 8 mecab-ipadic 2.7.0.20070801-16.module+el8.3.0+242+87d3366a RLSA-2019:2511

Advisories 5

References