PT-2019-3654 · Oracle+7 · Mysql Server+6

Published

2019-10-15

·

Updated

2023-01-31

·

CVE-2019-2997

CVSS v2.0

6.8

Medium

VectorAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.17 and prior
Description The issue is related to inadequate access control in the Server: DDL component of the Oracle MySQL database management system. This can be exploited by a remote attacker to cause a denial of service. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of the MySQL Server.
Recommendations For versions 8.0.17 and prior, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

ALSA-2020:3732
ALT-PU-2019-3247
ALT-PU-2020-1827
BDU:2019-03874
CESA-2020_3732
CVE-2019-2997
RHSA-2020:3518
RHSA-2020:3732
RHSA-2020:3755
RHSA-2020:3757
RHSA-2020_3732
RLSA-2020:3732
USN-4195-1

Affected Products

Alt Linux
Almalinux
Centos
Mysql Server
Red Hat
Rocky Linux
Ubuntu