Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2020-2761
HistoryApr 15, 2020 - 12:00 a.m.

CVE-2020-2761

2020-04-1500:00:00
ubuntu.com
ubuntu.com
10
mysql server
vulnerability
cve-2020-2761
high privileged attacker
compromise
dos

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

57.6%

JSON

Vulnerability in the MySQL Server product of Oracle MySQL (component:
Server: Security: Privileges). Supported versions that are affected are
8.0.18 and prior. Easily exploitable vulnerability allows high privileged
attacker with network access via multiple protocols to compromise MySQL
Server. Successful attacks of this vulnerability can result in unauthorized
ability to cause a hang or frequently repeatable crash (complete DOS) of
MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Notes

Author Note
leosilva since 5.5 is no longer upstream supported and so far we cannot patch it, marking it as ignored.
mdeslaur MySQL 8.x only
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchmariadb-10.0< anyUNKNOWN
ubuntu19.10noarchmysql-8.0< 8.0.19-0ubuntu0.19.10.3UNKNOWN
ubuntu20.04noarchmysql-8.0< 8.0.19-0ubuntu4UNKNOWN
ubuntu20.10noarchmysql-8.0< 8.0.19-0ubuntu4UNKNOWN
ubuntu21.04noarchmysql-8.0< 8.0.19-0ubuntu4UNKNOWN
ubuntu21.10noarchmysql-8.0< 8.0.19-0ubuntu4UNKNOWN
ubuntu22.04noarchmysql-8.0< 8.0.19-0ubuntu4UNKNOWN
ubuntu22.10noarchmysql-8.0< 8.0.19-0ubuntu4UNKNOWN
ubuntu23.04noarchmysql-8.0< 8.0.19-0ubuntu4UNKNOWN
ubuntu23.10noarchmysql-8.0< 8.0.19-0ubuntu4UNKNOWN
Rows per page:
1-10 of 131

Related

redhatcve 1
cve 1
osv 4
veracode 1
nvd 1
cvelist 1
vulnrichment 1
prion 1
openvas 5
nessus 13
fedora 3
ibm 1
freebsd 1
photon 2
oraclelinux 1
almalinux 1
rocky 1
redhat 4
gentoo 1
oracle 1
redhatcve
redhatcve
CVE-2020-2761
2021-02-21 15:53:11
cve
cve
CVE-2020-2761
2020-04-15 14:15:25
osv
osv
CGA-rfgm-8hvp-8xvv
2024-07-04 22:10:40
CVE-2020-2761
2020-04-15 14:15:25
Important: mysql:8.0 security update
2020-09-14 12:23:24
veracode
veracode
Denial Of Service (DoS)
2020-08-20 02:25:53
nvd
nvd
CVE-2020-2761
2020-04-15 14:15:25
cvelist
cvelist
CVE-2020-2761
2020-04-15 13:29:45
vulnrichment
vulnrichment
CVE-2020-2761
2020-04-15 13:29:45
prion
prion
Code injection
2020-04-15 14:15:00
openvas
openvas
Oracle MySQL Server 8.0 <= 8.0.18 Security Update (cpuapr2020) - Linux
2020-04-20 00:00:00
Oracle MySQL Server 8.0 <= 8.0.18 Security Update (cpuapr2020) - Windows
2020-04-20 00:00:00
Fedora: Security Advisory for community-mysql (FEDORA-2020-20ac7c92a1)
2020-05-11 00:00:00
nessus
nessus
MySQL 8.0.x < 8.0.19 Multiple Vulnerabilities (Jan 2020 CPU)
2020-01-16 00:00:00
Fedora 31 : community-mysql (2020-261c9ddd7c)
2020-05-11 00:00:00
Fedora 30 : community-mysql (2020-20ac7c92a1)
2020-05-11 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: community-mysql-8.0.20-1.fc31
2020-05-10 04:51:09
[SECURITY] Fedora 30 Update: community-mysql-8.0.20-1.fc30
2020-05-10 04:34:04
[SECURITY] Fedora 32 Update: community-mysql-8.0.20-1.fc32
2020-05-10 03:50:08
ibm
ibm
Security Bulletin: IBM API Connect's Developer Portal is impacted by vulnerabilities in MySQL.
2020-10-06 21:09:57
freebsd
freebsd
MySQL Server -- Multiple vulerabilities
2020-04-14 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0082
2020-04-22 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0082
2020-04-22 00:00:00
oraclelinux
oraclelinux
mysql:8.0 security update
2020-09-16 00:00:00
almalinux
almalinux
Important: mysql:8.0 security update
2020-09-14 12:23:24
rocky
rocky
mysql:8.0 security update
2020-09-14 12:23:24
redhat
redhat
(RHSA-2020:3518) Important: rh-mysql80-mysql security update
2020-08-19 13:45:28
(RHSA-2020:3755) Important: mysql:8.0 security update
2020-09-15 16:04:48
(RHSA-2020:3757) Important: mysql:8.0 security update
2020-09-15 18:10:12
gentoo
gentoo
MySQL: Multiple vulnerabilities
2021-05-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

57.6%

JSON
Related for UB:CVE-2020-2761
redhatcve1cve1osv4veracode1nvd1cvelist1vulnrichment1prion1openvas5nessus13fedora3ibm1freebsd1photon2oraclelinux1almalinux1rocky1redhat4gentoo1oracle1