PT-2019-1325 · Oracle+9 · Mysql Server+8

Publicado

2019-01-15

·

Atualizado

2023-12-29

·

CVE-2019-2537

CVSS v3.1

4.9

Média

VetorAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.42 and prior Oracle MySQL versions 5.7.24 and prior Oracle MySQL versions 8.0.13 and prior
Description The issue is related to insufficient access control in the MySQL Server component, specifically the Server: DDL subcomponent. It allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server.
Recommendations For Oracle MySQL versions 5.6.42 and prior, update to a version later than 5.6.42 to resolve the issue. For Oracle MySQL versions 5.7.24 and prior, update to a version later than 5.7.24 to resolve the issue. For Oracle MySQL versions 8.0.13 and prior, update to a version later than 8.0.13 to resolve the issue.

Correção

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALSA-2019:2511
ALSA-2019:3708
ALT-PU-2019-1183
ALT-PU-2019-1335
BDU:2019-00638
CESA-2019_2511
CESA-2019_3708
CVE-2019-2537
DLA-1655-1
MGASA-2019-0147
OPENSUSE-SU-2019:0327-1
OPENSUSE-SU-2019_0138-1
OPENSUSE-SU-2019_0327-1
RHSA-2019:1258
RHSA-2019:2484
RHSA-2019:2511
RHSA-2019:3708
RHSA-2019_2511
RHSA-2019_3708
RHSA-2020:5663
RLSA-2019:2511
RLSA-2019:3708
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1
SUSE-SU-2019:0555-1
SUSE-SU-2019:0609-1
SUSE-SU-2019:1162-1
SUSE-SU-2019:2048-1
SUSE-SU-2019:2118-1
USN-3867-1

Produtos afetados

Alt Linux
Almalinux
Centos
Mariadb Server
Mysql Server
Red Hat
Rocky Linux
Suse
Ubuntu