PT-2019-3726 · Mysql Server+2 · Mysql Connectors+2

Published 2019-10-15 · Updated 2023-02-04 · CVE-2019-2920

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 5.3.13 and prior MySQL Connectors versions 8.0.17 and prior

Description The issue is related to improper authorization in the Connector/ODBC component of the MySQL Connectors product. It allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, resulting in a partial denial of service.

Recommendations For versions 5.3.13 and prior, update to a version later than 5.3.13 to resolve the issue. For versions 8.0.17 and prior, update to a version later than 8.0.17 to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

ALT-PU-2019-3247

ALT-PU-2020-1827

BDU:2019-03953

CVE-2019-2920

USN-4195-1

Affected Products

Alt Linux

Mysql Connectors

Ubuntu

References · 234

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481 · Security Note
• https://ubuntu.com/security/CVE-2019-3018 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2898 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2741 · Security Note
• https://ubuntu.com/security/CVE-2019-2982 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2910 · Security Note
• https://bdu.fstec.ru/vul/2023-03008 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5436 · Security Note
• https://ubuntu.com/security/CVE-2019-2924 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2892 · Security Note
• https://bdu.fstec.ru/vul/2020-00378 · Security Note
• https://bdu.fstec.ru/vul/2020-02658 · Security Note
• https://bdu.fstec.ru/vul/2020-01525 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2740 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2926 · Security Note