CVE-2019-2420: Medium severity mysql vulnerability
Last updated 24 July 2024
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
External References:
http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
— Red Hat
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-2420.
What versions of Oracle MySQL are affected by this vulnerability?
The versions of Oracle MySQL affected by this vulnerability are 5.7.24 and prior, and 8.0.13 and prior.
How can an attacker exploit this vulnerability?
An attacker with high privileges and network access via multiple protocols can easily exploit this vulnerability.
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium with a severity value of 4.9.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [Oracle Security Advisory](http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html), [Red Hat Bugzilla - CVE-2019-2420](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1666776), [Red Hat Bugzilla - CVE-2019-2420](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1666778).