CVE-2019-2481
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
4.9
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2019-2481- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2019-2481- Updated
- 2026-11-02
EUVDEUVD-2019-12121 No score
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
- Record
EUVD-2019-12121- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6qj5-hrrf-qwgh
4.9
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
- Record
GHSA-6qj5-hrrf-qwgh- CVSS 3.0
- 4.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
4.9
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
- Record
CVE-2019-2481- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2014:0702
4.9
Red Hat Security Advisory: mariadb security update
- Record
RHSA-2014:0702- CVSS 3.0
- 4.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVRHSA-2019:2484
7.1
Red Hat Security Advisory: rh-mysql80-mysql security update
- Record
RHSA-2019:2484- CVSS 3.0
- 7.1 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2019:2511
7.1
Red Hat Security Advisory: mysql:8.0 security update
- Record
RHSA-2019:2511- CVSS 3.0
- 7.1 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVRLSA-2019:2511
7.1
Important: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.
The following packages have been upgraded to a later upstream version: mysql (8.0.17).
Security Fix(es):
-
mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)
-
mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)
-
mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)
-
mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)
-
mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)
-
mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)
-
mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)
-
mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)
-
mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)
-
mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)
-
mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)
-
mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)
-
mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)
-
mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)
-
mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)
-
mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)
-
mysql: Server: XML unspecified vulnerability (CVE-2019-2740)
-
mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)
-
mysql: Server: DML unspecified vulnerability (CVE-2019-2784)
-
mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)
-
mysql: Client programs unspecified vulnerability (CVE-2019-2797)
-
mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)
-
mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)
-
mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2019:2511- CVSS 3.0
- 7.1 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-2481
4.9
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
- Record
UBUNTU-CVE-2019-2481- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2019:2511 No score
Important: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.
The following packages have been upgraded to a later upstream version: mysql (8.0.17).
Security Fix(es):
-
mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)
-
mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)
-
mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)
-
mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)
-
mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)
-
mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)
-
mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)
-
mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)
-
mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)
-
mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)
-
mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)
-
mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)
-
mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)
-
mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)
-
mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)
-
mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)
-
mysql: Server: XML unspecified vulnerability (CVE-2019-2740)
-
mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)
-
mysql: Server: DML unspecified vulnerability (CVE-2019-2784)
-
mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)
-
mysql: Client programs unspecified vulnerability (CVE-2019-2797)
-
mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)
-
mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)
-
mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2019:2511- Updated
- 2026-11-02
OSVUSN-3867-1 No score
mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues.
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10 have been updated to MySQL 5.7.25.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-25.html https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- Record
USN-3867-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mecabAlmaLinux:8 From an advisory covering 99 CVEs |
before 0.996-1.module_el8.4.0+2532+b8928c02.9 | 0.996-1.module_el8.4.0+2532+b8928c02.9 |
mecabAlmaLinux:8 From an advisory covering 99 CVEs |
before 0.996-1.module_el8.5.0+33+8bc5f36a.9 | 0.996-1.module_el8.5.0+33+8bc5f36a.9 |
mecab-ipadicAlmaLinux:8 From an advisory covering 99 CVEs |
before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a | 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a |
mecab-ipadicAlmaLinux:8 From an advisory covering 99 CVEs |
before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 | 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 |
mecab-ipadic-EUCJPAlmaLinux:8 From an advisory covering 99 CVEs |
before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a | 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a |
mecab-ipadic-EUCJPAlmaLinux:8 From an advisory covering 99 CVEs |
before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 | 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02 |
mariadbRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-libsRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-serverRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
Show 71 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mariadb-benchRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-develRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-embeddedRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-embedded-develRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-testRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadbRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-benchRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-develRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-embeddedRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-embedded-develRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-serverRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-testRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadbRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-benchRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-develRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-libsRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-serverRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-testRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-embeddedRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-embedded-develRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadbRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-benchRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-develRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-serverRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-testRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-embeddedRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
mariadb-embedded-develRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs |
before 1:5.5.37-1.el7_0 | 1:5.5.37-1.el7_0 |
rh-mysql80-mysqlRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-commonRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-configRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-config-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-develRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-errmsgRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-serverRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-server-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-syspathsRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
rh-mysql80-mysql-testRed Hat:rhel_software_collections:3::el7 From an advisory covering 100 CVEs |
before 0:8.0.17-1.el7 | 0:8.0.17-1.el7 |
mecabRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 | 0:0.996-1.module+el8.0.0+3898+e09bb8de.9 |
mecab-ipadicRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de | 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de |
mecab-ipadic-EUCJPRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de | 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de |
mysqlRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-commonRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-develRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-errmsgRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-libsRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-serverRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-server-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-testRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mysql-test-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 100 CVEs |
before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de | 0:8.0.17-3.module+el8.0.0+3898+e09bb8de |
mecabRocky Linux:8 From an advisory covering 99 CVEs |
before 0:0.996-1.module+el8.3.0+242+87d3366a.9 | 0:0.996-1.module+el8.3.0+242+87d3366a.9 |
mecab-ipadicRocky Linux:8 From an advisory covering 99 CVEs |
before 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a | 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a |
mariadb-5.5Ubuntu:14.04:LTS |
before 5.5.37-0ubuntu0.14.04.1, plus listed versions 5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-1 |
5.5.37-0ubuntu0.14.04.1 |
mysql-5.5Ubuntu:14.04:LTS |
All versions, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 20 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1 |
None known |
mysql-5.7Ubuntu:16.04:LTS |
before 5.7.25-0ubuntu0.16.04.2, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1 Show 12 moreShow less5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.1 |
5.7.25-0ubuntu0.16.04.2 |
percona-server-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 |
None known |
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS |
All versions, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2 |
None known |
mysql-5.7Ubuntu:18.04:LTS |
before 5.7.25-0ubuntu0.18.04.2, plus listed versions 5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.1 |
5.7.25-0ubuntu0.18.04.2 |
mysql-5.7Ubuntu:16.04:LTS From an advisory covering 15 CVEs |
before 5.7.25-0ubuntu0.16.04.2, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1 Show 12 moreShow less5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.1 |
5.7.25-0ubuntu0.16.04.2 |
mysql-5.7Ubuntu:18.04:LTS From an advisory covering 15 CVEs |
before 5.7.25-0ubuntu0.18.04.2, plus listed versions 5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.1 |
5.7.25-0ubuntu0.18.04.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-2481 is a medium vulnerability (CVSS 4.9) in Oracle Mysql, published January 16, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.26%, the 88th percentile. Fixed in mariadb-5.5 5.5.37-0ubuntu0.14.04.1.
References
securityfocus.com/bid/106619
oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
usn.ubuntu.com/3867-1
security.netapp.com/advisory/ntap-20190118-0002
access.redhat.com/errata/RHSA-2019:2484
access.redhat.com/errata/RHSA-2019:2511
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-2481
github.com/advisories/GHSA-6qj5-hrrf-qwgh
errata.almalinux.org/8/ALSA-2019-2511.html
vulners.com/cve/CVE-2019-2420
vulners.com/cve/CVE-2019-2434
vulners.com/cve/CVE-2019-2436
vulners.com/cve/CVE-2019-2455
vulners.com/cve/CVE-2019-2481
vulners.com/cve/CVE-2019-2482
vulners.com/cve/CVE-2019-2486
vulners.com/cve/CVE-2019-2494
vulners.com/cve/CVE-2019-2495
vulners.com/cve/CVE-2019-2502
vulners.com/cve/CVE-2019-2503
vulners.com/cve/CVE-2019-2507
vulners.com/cve/CVE-2019-2510
vulners.com/cve/CVE-2019-2528
vulners.com/cve/CVE-2019-2529
vulners.com/cve/CVE-2019-2530
vulners.com/cve/CVE-2019-2531
vulners.com/cve/CVE-2019-2532
vulners.com/cve/CVE-2019-2533
vulners.com/cve/CVE-2019-2534
vulners.com/cve/CVE-2019-2535
vulners.com/cve/CVE-2019-2536
vulners.com/cve/CVE-2019-2537
vulners.com/cve/CVE-2019-2539
vulners.com/cve/CVE-2019-2580
vulners.com/cve/CVE-2019-2581
vulners.com/cve/CVE-2019-2584
vulners.com/cve/CVE-2019-2585
vulners.com/cve/CVE-2019-2587
vulners.com/cve/CVE-2019-2589
vulners.com/cve/CVE-2019-2592
vulners.com/cve/CVE-2019-2593
vulners.com/cve/CVE-2019-2596
vulners.com/cve/CVE-2019-2606
access.redhat.com/errata/RHSA-2014:0702
access.redhat.com/security/updates/classification
oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
mariadb.com/kb/en/mariadb-5537-release-notes
bugzilla.redhat.com/show_bug.cgi?id=1088133
bugzilla.redhat.com/show_bug.cgi?id=1088134
bugzilla.redhat.com/show_bug.cgi?id=1088143
bugzilla.redhat.com/show_bug.cgi?id=1088146
bugzilla.redhat.com/show_bug.cgi?id=1088179
bugzilla.redhat.com/show_bug.cgi?id=1088190
bugzilla.redhat.com/show_bug.cgi?id=1088191
bugzilla.redhat.com/show_bug.cgi?id=1088197
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0702.json
access.redhat.com/security/cve/CVE-2014-0384
cve.org/CVERecord?id=CVE-2014-0384
nvd.nist.gov/vuln/detail/CVE-2014-0384
access.redhat.com/security/cve/CVE-2014-2419
cve.org/CVERecord?id=CVE-2014-2419
nvd.nist.gov/vuln/detail/CVE-2014-2419
access.redhat.com/security/cve/CVE-2014-2430
cve.org/CVERecord?id=CVE-2014-2430
nvd.nist.gov/vuln/detail/CVE-2014-2430
access.redhat.com/security/cve/CVE-2014-2431
cve.org/CVERecord?id=CVE-2014-2431
nvd.nist.gov/vuln/detail/CVE-2014-2431
access.redhat.com/security/cve/CVE-2014-2432
cve.org/CVERecord?id=CVE-2014-2432
nvd.nist.gov/vuln/detail/CVE-2014-2432
access.redhat.com/security/cve/CVE-2014-2436
cve.org/CVERecord?id=CVE-2014-2436
nvd.nist.gov/vuln/detail/CVE-2014-2436
access.redhat.com/security/cve/CVE-2014-2438
cve.org/CVERecord?id=CVE-2014-2438
nvd.nist.gov/vuln/detail/CVE-2014-2438
access.redhat.com/security/cve/CVE-2019-2481
bugzilla.redhat.com/show_bug.cgi?id=1666743
cve.org/CVERecord?id=CVE-2019-2481
bugzilla.redhat.com/show_bug.cgi?id=1666738
bugzilla.redhat.com/show_bug.cgi?id=1666740
bugzilla.redhat.com/show_bug.cgi?id=1666741
bugzilla.redhat.com/show_bug.cgi?id=1666742
bugzilla.redhat.com/show_bug.cgi?id=1666744
bugzilla.redhat.com/show_bug.cgi?id=1666745
bugzilla.redhat.com/show_bug.cgi?id=1666746
bugzilla.redhat.com/show_bug.cgi?id=1666747
bugzilla.redhat.com/show_bug.cgi?id=1666748
bugzilla.redhat.com/show_bug.cgi?id=1666749
bugzilla.redhat.com/show_bug.cgi?id=1666750
bugzilla.redhat.com/show_bug.cgi?id=1666751
bugzilla.redhat.com/show_bug.cgi?id=1666753
bugzilla.redhat.com/show_bug.cgi?id=1666755
bugzilla.redhat.com/show_bug.cgi?id=1666756
bugzilla.redhat.com/show_bug.cgi?id=1666757
bugzilla.redhat.com/show_bug.cgi?id=1666758
bugzilla.redhat.com/show_bug.cgi?id=1666759
bugzilla.redhat.com/show_bug.cgi?id=1666760
bugzilla.redhat.com/show_bug.cgi?id=1666761
bugzilla.redhat.com/show_bug.cgi?id=1666762
bugzilla.redhat.com/show_bug.cgi?id=1666763
bugzilla.redhat.com/show_bug.cgi?id=1666764
bugzilla.redhat.com/show_bug.cgi?id=1702958
bugzilla.redhat.com/show_bug.cgi?id=1702959
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2484.json
access.redhat.com/security/cve/CVE-2019-2420
cve.org/CVERecord?id=CVE-2019-2420
nvd.nist.gov/vuln/detail/CVE-2019-2420
access.redhat.com/security/cve/CVE-2019-2434
cve.org/CVERecord?id=CVE-2019-2434
nvd.nist.gov/vuln/detail/CVE-2019-2434
access.redhat.com/security/cve/CVE-2019-2436
cve.org/CVERecord?id=CVE-2019-2436
nvd.nist.gov/vuln/detail/CVE-2019-2436
access.redhat.com/security/cve/CVE-2019-2455
cve.org/CVERecord?id=CVE-2019-2455
nvd.nist.gov/vuln/detail/CVE-2019-2455
access.redhat.com/security/cve/CVE-2019-2482
cve.org/CVERecord?id=CVE-2019-2482
nvd.nist.gov/vuln/detail/CVE-2019-2482
access.redhat.com/security/cve/CVE-2019-2486
cve.org/CVERecord?id=CVE-2019-2486
nvd.nist.gov/vuln/detail/CVE-2019-2486
access.redhat.com/security/cve/CVE-2019-2494
cve.org/CVERecord?id=CVE-2019-2494
nvd.nist.gov/vuln/detail/CVE-2019-2494
access.redhat.com/security/cve/CVE-2019-2495
cve.org/CVERecord?id=CVE-2019-2495
nvd.nist.gov/vuln/detail/CVE-2019-2495
access.redhat.com/security/cve/CVE-2019-2502
cve.org/CVERecord?id=CVE-2019-2502
nvd.nist.gov/vuln/detail/CVE-2019-2502
access.redhat.com/security/cve/CVE-2019-2503
cve.org/CVERecord?id=CVE-2019-2503
nvd.nist.gov/vuln/detail/CVE-2019-2503
access.redhat.com/security/cve/CVE-2019-2507
cve.org/CVERecord?id=CVE-2019-2507
nvd.nist.gov/vuln/detail/CVE-2019-2507
access.redhat.com/security/cve/CVE-2019-2510
cve.org/CVERecord?id=CVE-2019-2510
nvd.nist.gov/vuln/detail/CVE-2019-2510
access.redhat.com/security/cve/CVE-2019-2528
cve.org/CVERecord?id=CVE-2019-2528
nvd.nist.gov/vuln/detail/CVE-2019-2528
access.redhat.com/security/cve/CVE-2019-2529
cve.org/CVERecord?id=CVE-2019-2529
nvd.nist.gov/vuln/detail/CVE-2019-2529
access.redhat.com/security/cve/CVE-2019-2530
cve.org/CVERecord?id=CVE-2019-2530
nvd.nist.gov/vuln/detail/CVE-2019-2530
access.redhat.com/security/cve/CVE-2019-2531
cve.org/CVERecord?id=CVE-2019-2531
nvd.nist.gov/vuln/detail/CVE-2019-2531
access.redhat.com/security/cve/CVE-2019-2532
cve.org/CVERecord?id=CVE-2019-2532
nvd.nist.gov/vuln/detail/CVE-2019-2532
access.redhat.com/security/cve/CVE-2019-2533
cve.org/CVERecord?id=CVE-2019-2533
nvd.nist.gov/vuln/detail/CVE-2019-2533
access.redhat.com/security/cve/CVE-2019-2534
cve.org/CVERecord?id=CVE-2019-2534
nvd.nist.gov/vuln/detail/CVE-2019-2534
access.redhat.com/security/cve/CVE-2019-2535
cve.org/CVERecord?id=CVE-2019-2535
nvd.nist.gov/vuln/detail/CVE-2019-2535
access.redhat.com/security/cve/CVE-2019-2536
cve.org/CVERecord?id=CVE-2019-2536
nvd.nist.gov/vuln/detail/CVE-2019-2536
access.redhat.com/security/cve/CVE-2019-2537
cve.org/CVERecord?id=CVE-2019-2537
nvd.nist.gov/vuln/detail/CVE-2019-2537
cve.org/CVERecord?id=CVE-2019-2539
nvd.nist.gov/vuln/detail/CVE-2019-2539
cve.org/CVERecord?id=CVE-2019-2580
nvd.nist.gov/vuln/detail/CVE-2019-2580
oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
cve.org/CVERecord?id=CVE-2019-2581
nvd.nist.gov/vuln/detail/CVE-2019-2581
nvd.nist.gov/vuln/detail/CVE-2019-2584
oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2511.json
errata.rockylinux.org/RLSA-2019:2511
ubuntu.com/security/CVE-2019-2481
ubuntu.com/security/notices/USN-3867-1
ubuntu.com/security/CVE-2019-2420
ubuntu.com/security/CVE-2019-2434
ubuntu.com/security/CVE-2019-2455
ubuntu.com/security/CVE-2019-2482
ubuntu.com/security/CVE-2019-2486
ubuntu.com/security/CVE-2019-2503
ubuntu.com/security/CVE-2019-2507
ubuntu.com/security/CVE-2019-2510
ubuntu.com/security/CVE-2019-2528
ubuntu.com/security/CVE-2019-2529
ubuntu.com/security/CVE-2019-2531
ubuntu.com/security/CVE-2019-2532
ubuntu.com/security/CVE-2019-2534
ubuntu.com/security/CVE-2019-2537
Left out here: 363 references. The JSON record has them.