Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2019-2911
HistoryOct 16, 2019 - 12:00 a.m.

CVE-2019-2911

2019-10-1600:00:00
ubuntu.com
ubuntu.com
6

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

28.5%

JSON

Vulnerability in the MySQL Server product of Oracle MySQL (component:
Information Schema). Supported versions that are affected are 5.6.45 and
prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable
vulnerability allows high privileged attacker with network access via
multiple protocols to compromise MySQL Server. Successful attacks of this
vulnerability can result in unauthorized read access to a subset of MySQL
Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts).
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Bugs

Notes

Author Note
leosilva since 5.5 is no longer upstream supported and so far we cannot patch it marking as ignored.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchmysql-5.7< 5.7.28-0ubuntu0.18.04.4UNKNOWN
ubuntu19.04noarchmysql-5.7< 5.7.28-0ubuntu0.19.04.2UNKNOWN
ubuntu16.04noarchmysql-5.7< 5.7.28-0ubuntu0.16.04.2UNKNOWN
ubuntu19.10noarchmysql-8.0< 8.0.18-0ubuntu0.19.10.1UNKNOWN
ubuntu20.04noarchmysql-8.0< 8.0.18-0ubuntu3UNKNOWN
ubuntu20.10noarchmysql-8.0< 8.0.18-0ubuntu3UNKNOWN
ubuntu21.04noarchmysql-8.0< 8.0.18-0ubuntu3UNKNOWN
ubuntu21.10noarchmysql-8.0< 8.0.18-0ubuntu3UNKNOWN
ubuntu22.04noarchmysql-8.0< 8.0.18-0ubuntu3UNKNOWN
ubuntu22.10noarchmysql-8.0< 8.0.18-0ubuntu3UNKNOWN
Rows per page:
1-10 of 141

Related

veracode 1
redhatcve 1
cve 1
prion 1
osv 3
nessus 19
openvas 6
amazon 2
cloudfoundry 1
fedora 3
photon 5
ibm 2
ubuntu 1
freebsd 1
almalinux 1
oraclelinux 1
rocky 1
redhat 4
oracle 1
veracode
veracode
Information Disclosure
2020-08-20 02:25:37
redhatcve
redhatcve
CVE-2019-2911
2019-10-24 07:10:55
cve
cve
CVE-2019-2911
2019-10-16 18:15:00
prion
prion
Code injection
2019-10-16 18:15:00
osv
osv
CVE-2019-2911
2019-10-16 18:15:27
Important: mysql:8.0 security update
2020-09-14 12:23:24
Important: mysql:8.0 security update
2020-09-14 12:23:24
nessus
nessus
Amazon Linux AMI : mysql56 (ALAS-2020-1332)
2020-01-10 00:00:00
MySQL 5.6.x < 5.6.46 Multiple Vulnerabilities (Oct 2019 CPU)
2019-10-18 00:00:00
Amazon Linux AMI : mysql57 (ALAS-2020-1333)
2020-01-10 00:00:00
openvas
openvas
Oracle MySQL Server <= 5.6.45 / 5.7 <= 5.7.27 / 8.0 <= 8.0.17 Security Update (cpuoct2019) - Linux
2019-10-23 00:00:00
Oracle MySQL Server <= 5.6.45 / 5.7 <= 5.7.27 / 8.0 <= 8.0.17 Security Update (cpuoct2019) - Windows
2019-10-23 00:00:00
Fedora Update for community-mysql FEDORA-2019-48a0a07033
2019-11-12 00:00:00
amazon
amazon
Medium: mysql56
2020-01-06 23:26:00
Medium: mysql57
2020-01-06 23:27:00
cloudfoundry
cloudfoundry
MySQL Security Updates - Oct 2019 | Cloud Foundry
2020-01-27 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: community-mysql-8.0.18-1.fc30
2019-11-12 02:09:19
[SECURITY] Fedora 31 Update: community-mysql-8.0.18-1.fc31
2019-11-12 02:21:56
[SECURITY] Fedora 29 Update: community-mysql-8.0.18-1.fc29
2019-11-11 17:41:09
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0284
2020-03-18 00:00:00
Moderate Photon OS Security Update - PHSA-2020-0284
2020-04-02 00:00:00
Moderate Photon OS Security Update - PHSA-2020-0220
2020-03-13 00:00:00
ibm
ibm
Security Bulletin: API Connect is impacted by multiple vulnerabilities in Oracle MySQL
2020-03-03 02:31:05
Security Bulletin: IBM Security Guardium is affected by Oracle MySQL vulnerabilities
2020-10-08 20:19:18
ubuntu
ubuntu
MySQL vulnerabilities
2019-11-18 00:00:00
freebsd
freebsd
MySQL -- Multiple vulerabilities
2019-10-15 00:00:00
almalinux
almalinux
Important: mysql:8.0 security update
2020-09-14 12:23:24
oraclelinux
oraclelinux
mysql:8.0 security update
2020-09-16 00:00:00
rocky
rocky
mysql:8.0 security update
2020-09-14 12:23:24
redhat
redhat
(RHSA-2020:3518) Important: rh-mysql80-mysql security update
2020-08-19 13:45:28
(RHSA-2020:3732) Important: mysql:8.0 security update
2020-09-14 12:23:24
(RHSA-2020:3755) Important: mysql:8.0 security update
2020-09-15 16:04:48
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

28.5%

JSON
Related for UB:CVE-2019-2911
veracode1redhatcve1cve1prion1osv3nessus19openvas6amazon2cloudfoundry1fedora3photon5ibm2ubuntu1freebsd1almalinux1oraclelinux1rocky1redhat4oracle1