Vulnerability record/PUBLISHED/Published Jan 16, 2019 19:00:00 UTC

CVE-2019-2420

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Base scoreN/A/ 10

SeverityNoneCVSS 3.0

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityNone

Attack vectorNetworkAV

Attack complexityLowAC

Privileges requiredHighPR

User interactionNoneUI

ScopeUnchangedS

Confidentiality impactNoneC

Integrity impactNoneI

Availability impactHighA

CVSS vector stringCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityoracle

Last updatedOct 2, 2024 16:20:39 UTC

PublishedJan 16, 2019 19:00:00 UTC

ReservedDec 14, 2018 00:00:00 UTC