CVE-2019-2737
Summary
| CVE | CVE-2019-2737 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-07-23 23:15:00 UTC |
| Updated | 2023-11-07 03:09:00 UTC |
| Description | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Canonical | Ubuntu Linux | 16.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 16.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 18.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 19.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 16.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 18.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 19.04 | All | All | All |
| Operating System | Fedoraproject | Fedora | 29 | All | All | All |
| Operating System | Fedoraproject | Fedora | 30 | All | All | All |
| Application | Mariadb | Mariadb | All | All | All | All |
| Operating System | Opensuse | Leap | 15.1 | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
| Application | Oracle | Mysql | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [SECURITY] Fedora 30 Update: community-mysql-8.0.17-2.fc30 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| Oracle Critical Patch Update Advisory - July 2019 | MISC | www.oracle.com | Patch, Vendor Advisory |
| USN-4070-1: MySQL vulnerabilities | Ubuntu security notices | Ubuntu | UBUNTU | usn.ubuntu.com | Third Party Advisory |
| support.f5.com/csp/article/K51272092 | CONFIRM | support.f5.com | |
| [SECURITY] Fedora 30 Update: community-mysql-8.0.17-2.fc30 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| USN-4070-2: MariaDB vulnerabilities | Ubuntu security notices | Ubuntu | UBUNTU | usn.ubuntu.com | |
| support.f5.com/csp/article/K51272092 | CONFIRM | support.f5.com | |
| Bugtraq: [slackware-security] mariadb (SSA:2019-213-01) | BUGTRAQ | seclists.org | |
| USN-4070-3: MariaDB vulnerabilities | Ubuntu security notices | Ubuntu | UBUNTU | usn.ubuntu.com | |
| [SECURITY] Fedora 29 Update: community-mysql-8.0.17-2.fc29 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| myF5 | support.f5.com | ||
| Red Hat Customer Portal | REDHAT | access.redhat.com | |
| Slackware Security Advisory - mariadb Updates ≈ Packet Storm | MISC | packetstormsecurity.com | |
| Red Hat Customer Portal | REDHAT | access.redhat.com | |
| Red Hat Customer Portal | REDHAT | access.redhat.com | |
| [SECURITY] Fedora 29 Update: community-mysql-8.0.17-2.fc29 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [security-announce] openSUSE-SU-2019:2698-1: moderate: Security update f | SUSE | lists.opensuse.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159650 Oracle Enterprise Linux Security Update for mariadb:10.3 security and bug fix update (ELSA-2019-3708)
- 377107 Alibaba Cloud Linux Security Update for mysql:8.0 (ALINUX3-SA-2022:0107)
- 377429 Alibaba Cloud Linux Security Update for mariadb (ALINUX2-SA-2020:0087)
- 500391 Alpine Linux Security Update for mariadb
- 504141 Alpine Linux Security Update for mariadb
- 940079 AlmaLinux Security Update for mysql:8.0 (ALSA-2019:2511)
- 940341 AlmaLinux Security Update for mariadb:10.3 (ALSA-2019:3708)
- 960793 Rocky Linux Security Update for mysql:8.0 (RLSA-2019:2511)