CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H
EPSS
Percentile
24.8%
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent:
Server: Packaging). Supported versions that are affected are 8.0.13 and
prior. Difficult to exploit vulnerability allows high privileged attacker
with logon to the infrastructure where MySQL Server executes to compromise
MySQL Server. Successful attacks require human interaction from a person
other than the attacker and while the vulnerability is in MySQL Server,
attacks may significantly impact additional products. Successful attacks of
this vulnerability can result in unauthorized ability to cause a hang or
frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base
Score 5.0 (Availability impacts). CVSS Vector:
(CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H).
Author | Note |
---|---|
mdeslaur | 8.x only |
sbeattie | does not affect mariadb |
www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
launchpad.net/bugs/cve/CVE-2019-2536
mariadb.com/kb/en/library/security-vulnerabilities-in-oracle-mysql-that-did-not-exist-in-mariadb/
nvd.nist.gov/vuln/detail/CVE-2019-2536
security-tracker.debian.org/tracker/CVE-2019-2536
www.cve.org/CVERecord?id=CVE-2019-2536
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H
EPSS
Percentile
24.8%