6.5
CVSSv3

CVE-2019-2434

Published: 16/01/2019 Updated: 31/01/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 357
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle mysql

canonical ubuntu linux 16.04

canonical ubuntu linux 18.04

canonical ubuntu linux 18.10

netapp snapcenter -

netapp storage automation store -

netapp oncommand unified manager

netapp oncommand workflow automation -

redhat software collections 1.0

redhat enterprise linux 8.0

redhat enterprise linux eus 8.1

redhat enterprise linux eus 8.2

redhat enterprise linux server tus 8.2

redhat enterprise linux server aus 8.2

redhat enterprise linux server tus 8.4

redhat enterprise linux eus 8.4

redhat enterprise linux server aus 8.4

redhat enterprise linux server aus 8.6

redhat enterprise linux server tus 8.6

redhat enterprise linux eus 8.6

Vendor Advisories

Several security issues were fixed in MySQL ...
Debian Bug report logs - #919817 mysql-57: Security fixes from the January 2019 CPU Package: src:mysql-57; Maintainer for src:mysql-57 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 19 Jan 2019 21:18:01 UTC Severity: grave Tag ...
Synopsis Important: rh-mysql80-mysql security update Type/Severity Security Advisory: Important Topic An update for rh-mysql80-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Syste ...
Synopsis Important: mysql:80 security update Type/Severity Security Advisory: Important Topic An update for the mysql:80 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CV ...
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Supported versions that are affected are 5724 and prior and 8013 and prior Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks of this v ...
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Supported versions that are affected are 5724 and prior and 8013 and prior Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server Successful attacks of this vulnerability ca ...

Github Repositories

A python script that a) parses NIST NVD CVEs, b) prcoesses and exports them to CSV files, c) creates a postgres database and imports all the data in it, d) provides query capabilities for this CVEs database.

cve_manager A python script that: a) parses NIST NVD CVEs, b) prcoesses and exports them to CSV files, c) creates a postgres database and imports all the data in it, and d) provides (basic) query capabilities for this CVEs database It requires Python 3 ("psycopg2" and "requests" python libraries) Usage examples: Download, parse and save in CSV files all C

Python script for preparing NVD JSON feeds and importing in Local Database | Python 3.7 | Django 2.2.2

NVD CVE Managment Tool v30 Python v37 Djang0 v222 The script and its documentation are taken from cve_manager The improved script functions fine on python 37 and later, and some bugs are fixed that were associated with Python v27 Python script for preparing NVD JSON feeds and importing in Local Database | Python 37 | Django 222 a) parses NIST NVD CVEs, b) prcoesses a

cve_manager A python script that: a) parses NIST NVD CVEs, b) prcoesses and exports them to CSV files, c) creates a postgres database and imports all the data in it, and d) provides (basic) query capabilities for this CVEs database It requires Python 3 ("psycopg2" and "requests" python libraries) Usage examples: Download, parse and save in CSV files all C