CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
EPSS
Percentile
24.6%
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent:
Server: Security: Privileges). Supported versions that are affected are
5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable
vulnerability allows high privileged attacker with logon to the
infrastructure where MySQL Server executes to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized ability
to cause a hang or frequently repeatable crash (complete DOS) of MySQL
Server as well as unauthorized update, insert or delete access to some of
MySQL Server accessible data. CVSS 3.0 Base Score 5.1 (Integrity and
Availability impacts). CVSS Vector:
(CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Author | Note |
---|---|
ebarretto | as of 2019-08-22, no details for 5.5 |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 16.04 | noarch | mariadb-10.0 | < any | UNKNOWN |
ubuntu | 18.04 | noarch | mariadb-10.1 | < 1:10.1.41-0ubuntu0.18.04.1 | UNKNOWN |
ubuntu | 19.04 | noarch | mariadb-10.3 | < 1:10.3.17-0ubuntu0.19.04.1 | UNKNOWN |
ubuntu | 18.04 | noarch | mysql-5.7 | < 5.7.27-0ubuntu0.18.04.1 | UNKNOWN |
ubuntu | 19.04 | noarch | mysql-5.7 | < 5.7.27-0ubuntu0.19.04.1 | UNKNOWN |
ubuntu | 16.04 | noarch | mysql-5.7 | < 5.7.27-0ubuntu0.16.04.1 | UNKNOWN |
ubuntu | 16.04 | noarch | percona-server-5.6 | < any | UNKNOWN |
ubuntu | 16.04 | noarch | percona-xtradb-cluster-5.6 | < any | UNKNOWN |
launchpad.net/bugs/cve/CVE-2019-2739
nvd.nist.gov/vuln/detail/CVE-2019-2739
security-tracker.debian.org/tracker/CVE-2019-2739
ubuntu.com/security/notices/USN-4070-1
ubuntu.com/security/notices/USN-4070-2
ubuntu.com/security/notices/USN-4070-3
www.cve.org/CVERecord?id=CVE-2019-2739
www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html#AppendixMSQL
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
EPSS
Percentile
24.6%