4
CVSSv2

CVE-2019-2795

Published: 23/07/2019 Updated: 07/11/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 357
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Summary

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle mysql

redhat software collections 1.0

redhat enterprise linux 8.0

redhat enterprise linux eus 8.1

redhat enterprise linux eus 8.2

redhat enterprise linux server tus 8.2

redhat enterprise linux server aus 8.2

redhat enterprise linux server tus 8.4

redhat enterprise linux eus 8.4

redhat enterprise linux server aus 8.4

redhat enterprise linux server aus 8.6

redhat enterprise linux server tus 8.6

redhat enterprise linux eus 8.6

Vendor Advisories

Synopsis Important: rh-mysql80-mysql security update Type/Severity Security Advisory: Important Topic An update for rh-mysql80-mysql is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Syste ...
Synopsis Important: mysql:80 security update Type/Severity Security Advisory: Important Topic An update for the mysql:80 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CV ...

Github Repositories

一些漏洞检测/利用脚本

概述 该项目用于存放一些平时写的漏洞检测/利用脚本,不出意外会持续更新。 已有POC thinkphp v5 RCE漏洞 Confluence RCE漏洞,编号CVE-2019-3396 Weblogic wls async unserialization RCE漏洞,编号CVE-2019-2795 Apache Shiro RCE漏洞

一些漏洞检测/利用脚本

概述 该项目用于存放一些平时写的漏洞检测/利用脚本,不出意外会持续更新。 已有POC thinkphp v5 RCE漏洞 Confluence RCE漏洞,编号CVE-2019-3396 Weblogic wls async unserialization RCE漏洞,编号CVE-2019-2795 Apache Shiro RCE漏洞