mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection, causing a denial of service of the MySQL Connectors...

Fedora: Security Advisory for mysql-connector-java (FEDORA-2020-35995bb2d3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Updated mysql-connector-java package fixes security vulnerability

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands CVE-2020-2934...

Denial Of Service (DoS)

mysql-connector-java is vulnerable to denial of service. When working with a load balancing setup, if the connection property loadBalanceStrategy was set to bestResponseTime and connections to all the hosts in the original setup failed, a denial of service condition will occur in Connector/J, eve...

Fedora 32 : 1:mysql-connector-java (2020-747ec39700)

Rebased to version 8.0.21 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora: Security Advisory for mysql-connector-java (FEDORA-2020-747ec39700)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei EulerOS: Security Advisory for mysql-connector-java (EulerOS-SA-2020-1812)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : mysql-connector-java (EulerOS-SA-2020-1812)

According to the version of the mysql-connector-java package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are...

ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.hortis.sonar:sonar-maven-plugin (>=1.0-beta, <=1.0.2) +60 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.0.5)

mysql:mysql-connector-java MAVEN version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ch.hortis.sonar:sonar-application =1.0-beta, =1.0-beta, =1.1, =2.1.1, =1.0.0, =1.0.0, =2.0-rc1, =2.0-rc1,...

be.thematchbox:abstractriver (>=1.0.1, <=1.1.0), cn.dalgen.plugins:mybatis-maven-plugin (>=1.0.0, <=2.1.4) +27 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.33)

mysql:mysql-connector-java MAVEN version 5.1.33 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - be.thematchbox:abstractriver =1.0.1, =1.0.0, =3.1.0, =0.1.0, =0.1.0, =2.4, =2017.1.0.3, =2017.1.0.3,...

ai.preferred:venom (>=4.2.1, <=4.2.5), cc.xbyter.cloud:code-generator (1.0.0) +94 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.48)

mysql:mysql-connector-java MAVEN version 5.1.48 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ai.preferred:venom =4.2.1, =a.1.1.1, =a.2.0.0.rc1, =a.1.1.1, =a.2.0.0.rc1, =a.1.1.1, =a.1.1.2, =a.1.1.1,...

am.ik.home:uaa-server (>=1.0.0, <=1.8.1), cc.zenfery:springboot-starter-mds-sample (>=0.1.1, <=0.1.2) +134 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.40)

mysql:mysql-connector-java MAVEN version 5.1.40 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - am.ik.home:uaa-server =1.0.0, =0.1.1, =1.8.0-release, =2.50-beta, =1.3.1, =0.0.1, =1.0.0, =1.0.0, =1.0,...

cn.regionsoft:one (2.1.1), com.agifac.lib:dbmdl-framework (>=12.1.0, <=16.0.4) +25 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.32)

mysql:mysql-connector-java MAVEN version 5.1.32 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - cn.regionsoft:one 2.1.1 - com.agifac.lib:dbmdl-framework =12.1.0, =12.1.1, =1.0.0-release, =1.0.0, =0.0.10...

com.github.becauseqa:becauseqa-utils (>=1.0.1, <=1.0.3), com.github.becauseqa:becauseqa-utils-windows (>=1.0.1, <=1.0.3) +19 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.9)

mysql:mysql-connector-java MAVEN version 5.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.github.becauseqa:becauseqa-utils =1.0.1, =1.0.1, =1.1.4, =1.1.0, =1.1.1, =2.5, =0.0.1, =0.0.9, =0.0.9,...

ch.epfl.bbp.nlp:bluima_db (>=1.0.0, <=1.0.1), cn.com.itez:jwinner-base (>=0.0.5, <=0.1.2) +42 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.20)

mysql:mysql-connector-java MAVEN version 5.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ch.epfl.bbp.nlp:bluimadb =1.0.0, =0.0.5, =0.0.5, =0.0.5, =1.5.0, =1.0, =0.2.4, =0.0.2, =1.2.5, =1.2.5,...

com.alibaba.rocketmq:rocketmq-broker (>=3.1.5, <=3.2.6), com.digitalpebble.stormcrawler:storm-crawler-sql (>=0.9, <=1.4) +61 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.31)

mysql:mysql-connector-java MAVEN version 5.1.31 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.alibaba.rocketmq:rocketmq-broker =3.1.5, =0.9, =1.0.0, =0.7.1, =0.2.0, =1.0.0, =0.0.3, =0.0.1, =0.9.8,...

cn.gateside:gatcore (>=2.0.1, <=2.1.21), cn.gateside:gatesidelib (>=2.0.4, <=2.0.8) +109 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.36)

mysql:mysql-connector-java MAVEN version 5.1.36 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - cn.gateside:gatcore =2.0.1, =2.0.4, =2.0.1, =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =6.1.0.3, =0.4.3,...

ch.wavein:wi-play-mongo_2.12 (1.6), ch.wavein:wi-play-mongo_2.13 (1.7.5) +70 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.1.10)

mysql:mysql-connector-java MAVEN version 5.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ch.wavein:wi-play-mongo2.12 1.6 - ch.wavein:wi-play-mongo2.13 1.7.5 - com.54chen:amoeba-parser 0.0.1 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.5.0), com.codingzero.utilities:ddd-utilities-transaction (1.0.0) +14 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (6.0.4)

mysql:mysql-connector-java MAVEN version 6.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.5.0 - com.codingzero.utilities:ddd-utilities-transaction 1.0.0 -...

com.mysql:management (>=1.1.6, <=5-0-2-beta), org.mentaframework:mentawai (1.10.1) potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (3.1.12)

mysql:mysql-connector-java MAVEN version 3.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.mysql:management =1.1.6, =5-0-2-beta - org.mentaframework:mentawai 1.10.1 Source cves: CVE-2019-2692...