« List of all CVEs

CVE-2019-2681

Published: 4/23/2019 Last updated: 10/2/2024 Reserved: 12/14/2018

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CNA assigner: oracle (43595867-4340-4103-b7a2-9a5208d29a85) Requested by: n/a

Opam packages affected (1)

conf-mysql

Products affected (2)

Product Vendor Version
MySQL Server Oracle Corporation < 63f7fdf733add82f126ea00e2e48f6eba15ac4b9
MySQL Server Oracle Corporation < fb4aabdb1b48c25d9e1ee28f89440fd2ce556405

References (16)