First published: Wed Oct 16 2019(Updated: )
Last updated 24 July 2024
Credit: secalert_us@oracle.com secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/mysql-5.7 | ||
MySQL | >=5.3.0<=5.3.13 | |
MySQL | >=8.0.0<=8.0.17 | |
Ubuntu Linux | =16.04 | |
Ubuntu Linux | =18.04 | |
Ubuntu Linux | =19.04 | |
Ubuntu Linux | =19.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-2920 is classified as an easily exploitable vulnerability that allows unauthenticated attackers to gain network access.
To fix CVE-2019-2920, upgrade the affected MySQL Connector/ODBC versions to 5.3.14 or later for the 5.x branch, and 8.0.18 or later for the 8.x branch.
CVE-2019-2920 affects MySQL Connector/ODBC versions 5.3.13 and prior, as well as versions 8.0.17 and prior.
Yes, CVE-2019-2920 can be exploited by an unauthenticated attacker with network access.
CVE-2019-2920 impacts the MySQL Connectors product of Oracle MySQL, particularly the Connector/ODBC.