First published: Tue Apr 23 2019(Updated: )
Last updated 24 July 2024
Credit: secalert_us@oracle.com secalert_us@oracle.com secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/mysql | <5.6.44 | 5.6.44 |
redhat/mysql | <5.7.26 | 5.7.26 |
redhat/mysql | <8.0.16 | 8.0.16 |
redhat/mariadb | <5.5.64 | 5.5.64 |
redhat/mariadb | <10.4.5 | 10.4.5 |
redhat/mariadb | <10.3.15 | 10.3.15 |
redhat/mariadb | <10.2.24 | 10.2.24 |
redhat/mariadb | <10.1.39 | 10.1.39 |
debian/mariadb-10.0 | ||
debian/mysql-5.7 | ||
MySQL | >=5.6.0<=5.6.43 | |
MySQL | >=5.7.0<=5.7.25 | |
MySQL | >=8.0.0<=8.0.15 | |
Ubuntu Linux | =14.04 | |
Ubuntu Linux | =16.04 | |
Ubuntu Linux | =18.04 | |
Ubuntu Linux | =18.10 | |
Ubuntu Linux | =19.04 | |
Mariadb Mariadb | >=5.5.0<5.5.64 | |
Mariadb Mariadb | >=10.1.0<10.1.39 | |
Mariadb Mariadb | >=10.2.0<10.2.24 | |
Mariadb Mariadb | >=10.3.0<10.3.15 | |
Mariadb Mariadb | >=10.4.0<10.4.5 | |
openSUSE | =15.0 | |
openSUSE | =15.1 | |
redhat enterprise Linux desktop | =7.0 | |
redhat enterprise Linux eus | =8.1 | |
redhat enterprise Linux eus | =8.2 | |
redhat enterprise Linux eus | =8.4 | |
redhat enterprise Linux eus | =8.6 | |
redhat enterprise Linux server | =7.0 | |
redhat enterprise Linux server aus | =8.2 | |
redhat enterprise Linux server aus | =8.4 | |
redhat enterprise Linux server aus | =8.6 | |
redhat enterprise Linux server tus | =8.2 | |
redhat enterprise Linux server tus | =8.4 | |
redhat enterprise Linux server tus | =8.6 | |
redhat enterprise Linux workstation | =7.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-2627 is considered easily exploitable, allowing high privileged attackers to manipulate MySQL Server privileges.
To remediate CVE-2019-2627, upgrade MySQL Server to version 5.6.44 or higher, 5.7.26 or higher, or 8.0.16 or higher.
Affected versions of MySQL include 5.6.43 and prior, 5.7.25 and prior, and 8.0.15 and prior.
Yes, certain MariaDB versions such as 5.5.64 and 10.4.5 are also impacted by CVE-2019-2627.
CVE-2019-2627 affects the MySQL Server component, specifically the Server: Security: Privileges subcomponent.