CVE-2019-2805
En bref Sévérité Non disponible EPSS EPSS 3.70 % · centile 90 (2026-10-27) État PUBLISHED Publiée 2019-07-23 Mise à jour 2024-10-01 Attribuée par oracle Statut NVD Modified Description Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Scores Version Score Vecteur Évalué par CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.0 AV:N/AC:L/Au:S/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 5.6.0 ≤ 5.6.44cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 5.7.0 ≤ 5.7.26cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 8.0.0 ≤ 8.0.16cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 5.5.0 < 5.5.65cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.1.0 < 10.1.41cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.2.0 < 10.2.26cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.3.0 < 10.3.17cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.4.0 < 10.4.7cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:8.0:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*Produits affectés
Références
Sources
