CVE-2019-2969: Medium severity Oracle MySQL vulnerability

Published Oct 16, 2019
·
Updated

Last updated 24 July 2024

Other sources

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

— Launchpad

Affected Software

13 affected components
debian/mysql-5.7
Oracle MySQL>=5.6.0<=5.6.44
Oracle MySQL>=5.7.0<=5.7.26
Oracle MySQL>=8.0.0<=8.0.16
NetApp Active Iq Unified Manager Vmware Vsphere
NetApp Active Iq Unified Manager Windows
NetApp OnCommand Insight
NetApp OnCommand Workflow Automation
NetApp Snapcenter
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.04
Canonical Ubuntu Linux=19.10

Event History

Oct 16, 2019
CVE Published
via MITRE·05:40 PM
Data Sourced
via MITRE·05:40 PM
DescriptionWeakness
Data Sourced
via OSV·06:15 PM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2019-2969?

CVE-2019-2969 is classified as an easily exploitable vulnerability that can allow unauthenticated attackers to gain unauthorized access.

2

How do I fix CVE-2019-2969?

To fix CVE-2019-2969, update MySQL Server to versions 5.6.45, 5.7.27, or 8.0.17 and later.

3

Which versions are affected by CVE-2019-2969?

CVE-2019-2969 affects MySQL versions 5.6.44 and prior, 5.7.26 and prior, and 8.0.16 and prior.

4

What systems are vulnerable to CVE-2019-2969?

Systems running affected versions of MySQL Server such as Oracle MySQL for various operating environments are vulnerable to CVE-2019-2969.

5

Is there a workaround for CVE-2019-2969?

There are no specific workarounds for CVE-2019-2969, so patching is recommended to mitigate the vulnerability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203