Every CVE Search/ Get API key

CVE-2019-2455

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....

6.5 MediumFix available

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.79%Up 2.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2455
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2455
Updated
2026-11-02
EUVDEUVD-2019-12095 No score

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2019-12095
Updated
2026-11-03
GitHub AdvisoriesGHSA-r88f-7f8h-mc36 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-r88f-7f8h-mc36
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2455
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2018:2439 7.7

Red Hat Security Advisory: mariadb security and bug fix update

Record
RHSA-2018:2439
CVSS 3.0
7.7 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVRHSA-2019:1258 8.8

Red Hat Security Advisory: rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update

Record
RHSA-2019:1258
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2484 7.1

Red Hat Security Advisory: rh-mysql80-mysql security update

Record
RHSA-2019:2484
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2019:2511 7.1

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2019:2511
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2019:2511 7.1

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.

The following packages have been upgraded to a later upstream version: mysql (8.0.17).

Security Fix(es):

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

  • mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

  • mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)

  • mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

  • mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)

  • mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

  • mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

  • mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

  • mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

  • mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

  • mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

  • mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

  • mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

  • mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

  • mysql: Client programs unspecified vulnerability (CVE-2019-2797)

  • mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

  • mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2019:2511
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2019-2455 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
UBUNTU-CVE-2019-2455
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2019:2511 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.

The following packages have been upgraded to a later upstream version: mysql (8.0.17).

Security Fix(es):

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

  • mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

  • mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)

  • mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

  • mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)

  • mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

  • mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

  • mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

  • mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

  • mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

  • mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

  • mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

  • mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

  • mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

  • mysql: Client programs unspecified vulnerability (CVE-2019-2797)

  • mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

  • mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2019:2511
Updated
2026-11-02
OSVUSN-3867-1 No score

mysql-5.7 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues.

Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10 have been updated to MySQL 5.7.25.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-25.html https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Record
USN-3867-1
Updated
2026-11-02

Affected products

Show 2 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
mecab
AlmaLinux:8
From an advisory covering 99 CVEs
 before 0.996-1.module_el8.4.0+2532+b8928c02.9
0.996-1.module_el8.4.0+2532+b8928c02.9
mecab
AlmaLinux:8
From an advisory covering 99 CVEs
 before 0.996-1.module_el8.5.0+33+8bc5f36a.9
0.996-1.module_el8.5.0+33+8bc5f36a.9
mecab-ipadic
AlmaLinux:8
From an advisory covering 99 CVEs
 before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
mecab-ipadic
AlmaLinux:8
From an advisory covering 99 CVEs
 before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 99 CVEs
 before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 99 CVEs
 before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
mariadb
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-server
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
Show 119 moreShow less
Affected packages
PackageAffectedFixed
mariadb-bench
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-embedded
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-embedded-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-test
Red Hat:enterprise_linux:7::client
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-bench
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-embedded
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-embedded-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-test
Red Hat:enterprise_linux:7::computenode
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-bench
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-server
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-test
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-embedded
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-embedded-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-bench
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-test
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-embedded
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
mariadb-embedded-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 23 CVEs
 before 1:5.5.60-1.el7_5
1:5.5.60-1.el7_5
rh-mariadb102-galera
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 0:25.3.25-1.el6
0:25.3.25-1.el6
rh-mariadb102-galera-debuginfo
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 0:25.3.25-1.el6
0:25.3.25-1.el6
rh-mariadb102-mariadb
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-backup
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-backup-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-bench
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-common
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-config
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-config-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-debuginfo
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-devel
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-errmsg
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-gssapi-client
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-gssapi-server
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-oqgraph-engine
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-galera
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-galera-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-utils
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-server-utils-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-syspaths
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-mariadb-test
Red Hat:rhel_software_collections:3::el6
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el6
1:10.2.22-1.el6
rh-mariadb102-galera
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 0:25.3.25-1.el7
0:25.3.25-1.el7
rh-mariadb102-galera-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 0:25.3.25-1.el7
0:25.3.25-1.el7
rh-mariadb102-mariadb
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-backup
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-backup-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-bench
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-config-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-gssapi-client
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-gssapi-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-oqgraph-engine
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-galera
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-galera-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-utils
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-server-utils-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mariadb102-mariadb-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 47 CVEs
 before 1:10.2.22-1.el7
1:10.2.22-1.el7
rh-mysql80-mysql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-config-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-server-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mecab
Rocky Linux:8
From an advisory covering 99 CVEs
 before 0:0.996-1.module+el8.3.0+242+87d3366a.9
0:0.996-1.module+el8.3.0+242+87d3366a.9
mecab-ipadic
Rocky Linux:8
From an advisory covering 99 CVEs
 before 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
mariadb-5.5
Ubuntu:14.04:LTS
 before 5.5.61-1ubuntu0.14.04.1, plus listed versions
5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.15.5.39-0ubuntu0.14.04.1
Show 15 moreShow less
5.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.25.5.41-1ubuntu0.14.04.15.5.43-1ubuntu0.14.04.25.5.44-1ubuntu0.14.04.15.5.46-1ubuntu0.14.04.25.5.47-1ubuntu0.14.04.15.5.49-1ubuntu0.14.04.15.5.52-1ubuntu0.14.04.15.5.53-1ubuntu0.14.04.15.5.54-1ubuntu0.14.04.15.5.56-1ubuntu0.14.04.15.5.57-1ubuntu0.14.04.15.5.58-1ubuntu0.14.04.15.5.59-1ubuntu0.14.04.1
5.5.61-1ubuntu0.14.04.1
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
mariadb-10.0
Ubuntu:16.04:LTS
 before 10.0.36-0ubuntu0.16.04.1, plus listed versions
10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-7
Show 7 moreShow less
10.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.110.0.29-0ubuntu0.16.04.110.0.31-0ubuntu0.16.04.210.0.33-0ubuntu0.16.04.110.0.34-0ubuntu0.16.04.1
10.0.36-0ubuntu0.16.04.1
mysql-5.7
Ubuntu:16.04:LTS
 before 5.7.25-0ubuntu0.16.04.2, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 12 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.1
5.7.25-0ubuntu0.16.04.2
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mariadb-10.1
Ubuntu:18.04:LTS
 before 1:10.1.34-0ubuntu0.18.04.1, plus listed versions
10.1.25-11:10.1.29-6
1:10.1.34-0ubuntu0.18.04.1
mysql-5.7
Ubuntu:18.04:LTS
 before 5.7.25-0ubuntu0.18.04.2, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.1
5.7.25-0ubuntu0.18.04.2
mysql-5.7
Ubuntu:16.04:LTS
From an advisory covering 15 CVEs
 before 5.7.25-0ubuntu0.16.04.2, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 12 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.1
5.7.25-0ubuntu0.16.04.2
mysql-5.7
Ubuntu:18.04:LTS
From an advisory covering 15 CVEs
 before 5.7.25-0ubuntu0.18.04.2, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.1
5.7.25-0ubuntu0.18.04.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2455 is a medium vulnerability (CVSS 6.5) in Oracle Mysql, published January 16, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.79%, the 90th percentile. Fixed in mariadb-5.5 5.5.61-1ubuntu0.14.04.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 548 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open