Back to feed
EUVD-2019-12169 · Published Jan 16, 2019
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Technologies
Redhat Enterprise Linux Server AusRedhat Enterprise Linux Server TusRedhat Enterprise Linux WorkstationRedhat Enterprise Linux ServerDebian Debian LinuxNetapp Oncommand Workflow AutomationOracle MysqlCanonical Ubuntu LinuxRedhat Enterprise Linux DesktopRedhat Enterprise LinuxRedhat Enterprise Linux EusNetapp Oncommand Unified ManagerNetapp Storage Automation StoreMariadb MariadbNetapp Snapcenter
CVSS scores
- v3.16.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - v2.04.0
AV:N/AC:L/Au:S/C:N/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- http://www.securityfocus.com/bid/106619
- https://access.redhat.com/errata/RHSA-2019:2327
- https://access.redhat.com/errata/RHSA-2019:2484
- https://access.redhat.com/errata/RHSA-2019:2511
- https://lists.debian.org/debian-lts-announce/2019/02/msg00000.html
Potentially impacted assets
See if this affects your attack surface
