Every CVE Search/ Get API key

CVE-2019-2529

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....

6.5 MediumFix available

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

4.49%Up 2.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2529
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2529
Updated
2026-11-02
EUVDEUVD-2019-12169 No score

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2019-12169
Updated
2026-11-03
GitHub AdvisoriesGHSA-mj64-phg5-fhm9 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-mj64-phg5-fhm9
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALPINE-CVE-2019-2529 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
ALPINE-CVE-2019-2529
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2529
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2019:2327 6.5

Red Hat Security Advisory: mariadb security and bug fix update

Record
RHSA-2019:2327
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:2484 7.1

Red Hat Security Advisory: rh-mysql80-mysql security update

Record
RHSA-2019:2484
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2019:2511 7.1

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2019:2511
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2019:2511 7.1

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.

The following packages have been upgraded to a later upstream version: mysql (8.0.17).

Security Fix(es):

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

  • mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

  • mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)

  • mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

  • mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)

  • mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

  • mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

  • mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

  • mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

  • mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

  • mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

  • mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

  • mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

  • mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

  • mysql: Client programs unspecified vulnerability (CVE-2019-2797)

  • mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

  • mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2019:2511
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2019-2529 6.5

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Record
UBUNTU-CVE-2019-2529
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2019:2511 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.

The following packages have been upgraded to a later upstream version: mysql (8.0.17).

Security Fix(es):

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

  • mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

  • mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)

  • mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

  • mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)

  • mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

  • mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

  • mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

  • mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

  • mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

  • mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

  • mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

  • mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

  • mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

  • mysql: Client programs unspecified vulnerability (CVE-2019-2797)

  • mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

  • mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2019:2511
Updated
2026-11-02
OSVMGASA-2019-0147 No score

Updated mariadb packages fix security vulnerability

Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: Optimizer). Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2019-2529).

Vulnerability in the MariaDB Server component of MariaDB (subcomponent: Server: DDL). Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MariaDB Server (CVE-2019-2537).

Record
MGASA-2019-0147
Updated
2026-11-02
OSVSUSE-SU-2019:2048-1 No score

Security update for mariadb

This update for mariadb fixes the following issues:

Update to MariaDB 10.0.38 GA (bsc#1136037).

Security issues fixed:

  • CVE-2019-2537: Denial of service via multiple protocols (bsc#1136037)
  • CVE-2019-2529: Denial of service via multiple protocols (bsc#1136037)
  • CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
  • CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
  • CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
  • CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
  • CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
  • CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
  • CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
  • CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
  • CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
  • CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security changes:

  • Removed PerconaFT from the package as it has AGPL licence (bsc#1118754).
  • Do not just remove tokudb plugin but don't build it at all (missing jemalloc dependency).
  • Fixed reading options for multiple instances if my${INSTANCE}.cnf is used (bsc#1132666).
  • Removed 'umask 077' from mysql-systemd-helper that caused new datadirs created with wrong permissions (bsc#1132666).

Release notes and changelog:

Record
SUSE-SU-2019:2048-1
Updated
2026-11-02
OSVSUSE-SU-2019:2118-1 No score

Security update for mariadb-100

This update for mariadb-100 to version 10.0.38 fixes the following issues:

  • CVE-2019-2537: Fixed a denial of service vulnerability which can lead to MySQL compromise (bsc#1136037).
  • CVE-2019-2529: Fixed a denial of service vulnerability by an privileged attacker via a protocol compromise (bsc#1136037).
Record
SUSE-SU-2019:2118-1
Updated
2026-11-02
OSVUSN-3867-1 No score

mysql-5.7 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues.

Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10 have been updated to MySQL 5.7.25.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-25.html https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Record
USN-3867-1
Updated
2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
mariadb
Alpine:v3.6
 5.5.0 up to 10.1.38-r0
10.1.38-r0
mariadb
Alpine:v3.7
 5.5.0 up to 10.1.38-r0
10.1.38-r0
mecab
AlmaLinux:8
From an advisory covering 99 CVEs
 before 0.996-1.module_el8.4.0+2532+b8928c02.9
0.996-1.module_el8.4.0+2532+b8928c02.9
mecab
AlmaLinux:8
From an advisory covering 99 CVEs
 before 0.996-1.module_el8.5.0+33+8bc5f36a.9
0.996-1.module_el8.5.0+33+8bc5f36a.9
mecab-ipadic
AlmaLinux:8
From an advisory covering 99 CVEs
 before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
mecab-ipadic
AlmaLinux:8
From an advisory covering 99 CVEs
 before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 99 CVEs
 before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 99 CVEs
 before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
mariadb-10.0
Debian:8
From an advisory covering 2 CVEs
 before 10.0.38-0+deb8u1, plus listed versions
10.0.16-110.0.17-110.0.17-1~exp110.0.17-1~exp210.0.18-1~exp1
Show 45 moreShow less
10.0.19-110.0.20-0+deb8u110.0.20-110.0.20-210.0.20-310.0.21-110.0.21-210.0.21-310.0.22-0+deb8u110.0.22-110.0.22-210.0.22-2~exp110.0.22-2~exp210.0.22-310.0.22-410.0.22-4~exp110.0.22-510.0.22-610.0.23-0+deb8u110.0.23-110.0.23-210.0.23-310.0.24-110.0.24-210.0.24-310.0.24-410.0.24-4~exp110.0.24-510.0.24-610.0.24-710.0.25-0+deb8u110.0.25-110.0.26-0+deb8u110.0.26-110.0.26-210.0.26-2~exp210.0.26-2~exp310.0.26-310.0.27-0+deb8u110.0.27-110.0.27-210.0.28-0+deb8u110.0.28-110.0.28-210.0.28-3
10.0.38-0+deb8u1
mariadb
Mageia:6
From an advisory covering 2 CVEs
 before 10.1.38-1.mga6
10.1.38-1.mga6
Show 91 moreShow less
Affected packages
PackageAffectedFixed
mariadb
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-server
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-bench
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-embedded
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-embedded-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-test
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-bench
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-embedded
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-embedded-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-test
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-bench
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-server
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-test
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-embedded
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-embedded-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-bench
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-test
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-embedded
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
mariadb-embedded-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 1:5.5.64-1.el7
1:5.5.64-1.el7
rh-mysql80-mysql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-config-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-server-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 100 CVEs
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 100 CVEs
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mecab
Rocky Linux:8
From an advisory covering 99 CVEs
 before 0:0.996-1.module+el8.3.0+242+87d3366a.9
0:0.996-1.module+el8.3.0+242+87d3366a.9
mecab-ipadic
Rocky Linux:8
From an advisory covering 99 CVEs
 before 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
mariadb
SUSE:HPE Helion OpenStack 8
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:OpenStack Cloud 7
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:OpenStack Cloud 8
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb
SUSE:Enterprise Storage 4
From an advisory covering 12 CVEs
 before 10.0.38-29.27.3
10.0.38-29.27.3
mariadb-100
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 2 CVEs
 before 10.0.38-2.6.2
10.0.38-2.6.2
mariadb-100
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 2 CVEs
 before 10.0.38-2.6.2
10.0.38-2.6.2
mariadb-100
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 2 CVEs
 before 10.0.38-2.6.2
10.0.38-2.6.2
mariadb-100
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 10.0.38-2.6.2
10.0.38-2.6.2
mariadb-100
SUSE:Linux Enterprise Workstation Extension 12 SP4
From an advisory covering 2 CVEs
 before 10.0.38-2.6.2
10.0.38-2.6.2
mariadb-5.5
Ubuntu:14.04:LTS
 before 5.5.63-1ubuntu0.14.04.1, plus listed versions
5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.15.5.39-0ubuntu0.14.04.1
Show 16 moreShow less
5.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.25.5.41-1ubuntu0.14.04.15.5.43-1ubuntu0.14.04.25.5.44-1ubuntu0.14.04.15.5.46-1ubuntu0.14.04.25.5.47-1ubuntu0.14.04.15.5.49-1ubuntu0.14.04.15.5.52-1ubuntu0.14.04.15.5.53-1ubuntu0.14.04.15.5.54-1ubuntu0.14.04.15.5.56-1ubuntu0.14.04.15.5.57-1ubuntu0.14.04.15.5.58-1ubuntu0.14.04.15.5.59-1ubuntu0.14.04.15.5.61-1ubuntu0.14.04.1
5.5.63-1ubuntu0.14.04.1
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
mariadb-10.0
Ubuntu:16.04:LTS
 before 10.0.38-0ubuntu0.16.04.1, plus listed versions
10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-7
Show 8 moreShow less
10.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.110.0.29-0ubuntu0.16.04.110.0.31-0ubuntu0.16.04.210.0.33-0ubuntu0.16.04.110.0.34-0ubuntu0.16.04.110.0.36-0ubuntu0.16.04.1
10.0.38-0ubuntu0.16.04.1
mysql-5.7
Ubuntu:16.04:LTS
 before 5.7.25-0ubuntu0.16.04.2, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 12 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.1
5.7.25-0ubuntu0.16.04.2
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mariadb-10.1
Ubuntu:18.04:LTS
 before 1:10.1.38-0ubuntu0.18.04.1, plus listed versions
10.1.25-11:10.1.29-61:10.1.34-0ubuntu0.18.04.1
1:10.1.38-0ubuntu0.18.04.1
mysql-5.7
Ubuntu:18.04:LTS
 before 5.7.25-0ubuntu0.18.04.2, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.1
5.7.25-0ubuntu0.18.04.2
mysql-5.7
Ubuntu:16.04:LTS
From an advisory covering 15 CVEs
 before 5.7.25-0ubuntu0.16.04.2, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 12 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.1
5.7.25-0ubuntu0.16.04.2
mysql-5.7
Ubuntu:18.04:LTS
From an advisory covering 15 CVEs
 before 5.7.25-0ubuntu0.18.04.2, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.15.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.1
5.7.25-0ubuntu0.18.04.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2529 is a medium vulnerability (CVSS 6.5) in Oracle Mysql, published January 16, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.49%, the 91st percentile. Fixed in mariadb 10.1.38-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 7 versions and 403 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open