Every CVE Search/ Get API key

CVE-2019-2879

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...

4.9 MediumFix available

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.95%Up 1.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 4.9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2879
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2879
Updated
2026-11-02
EUVDEUVD-2019-12518 No score

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2019-12518
Updated
2026-11-03
GitHub AdvisoriesGHSA-6489-gxjp-89m5 4.9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-6489-gxjp-89m5
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2019-2879
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:2484 7.1

Red Hat Security Advisory: rh-mysql80-mysql security update

Record
RHSA-2019:2484
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2019:2511 7.1

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2019:2511
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2019:2511 7.1

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.

The following packages have been upgraded to a later upstream version: mysql (8.0.17).

Security Fix(es):

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

  • mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

  • mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)

  • mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

  • mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)

  • mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

  • mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

  • mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

  • mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

  • mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

  • mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

  • mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

  • mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

  • mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

  • mysql: Client programs unspecified vulnerability (CVE-2019-2797)

  • mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

  • mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2019:2511
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Updated
2026-11-02
OSVALSA-2019:2511 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.

The following packages have been upgraded to a later upstream version: mysql (8.0.17).

Security Fix(es):

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)

  • mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)

  • mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)

  • mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)

  • mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)

  • mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)

  • mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)

  • mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)

  • mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)

  • mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)

  • mysql: Server: XML unspecified vulnerability (CVE-2019-2740)

  • mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)

  • mysql: Server: DML unspecified vulnerability (CVE-2019-2784)

  • mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)

  • mysql: Client programs unspecified vulnerability (CVE-2019-2797)

  • mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)

  • mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)

  • mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2019:2511
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mecab
AlmaLinux:8
 before 0.996-1.module_el8.4.0+2532+b8928c02.9
0.996-1.module_el8.4.0+2532+b8928c02.9
mecab
AlmaLinux:8
 before 0.996-1.module_el8.5.0+33+8bc5f36a.9
0.996-1.module_el8.5.0+33+8bc5f36a.9
mecab-ipadic
AlmaLinux:8
 before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
mecab-ipadic
AlmaLinux:8
 before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
mecab-ipadic-EUCJP
AlmaLinux:8
 before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
mecab-ipadic-EUCJP
AlmaLinux:8
 before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
rh-mysql80-mysql
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-common
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-config
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-config-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
Show 27 moreShow less
Affected packages
PackageAffectedFixed
rh-mysql80-mysql-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-devel
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-errmsg
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-server
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-server-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
rh-mysql80-mysql-test
Red Hat:rhel_software_collections:3::el7
 before 0:8.0.17-1.el7
0:8.0.17-1.el7
mecab
Red Hat:enterprise_linux:8::appstream
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-common
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-devel
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-libs
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-server
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-test
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.17-3.module+el8.0.0+3898+e09bb8de
0:8.0.17-3.module+el8.0.0+3898+e09bb8de
mecab
Rocky Linux:8
 before 0:0.996-1.module+el8.3.0+242+87d3366a.9
0:0.996-1.module+el8.3.0+242+87d3366a.9
mecab-ipadic
Rocky Linux:8
 before 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2879 is a medium vulnerability (CVSS 4.9) in Oracle Mysql, published July 23, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.95%, the 80th percentile. Fixed in mecab 0.996-1.module_el8.4.0+2532+b8928c02.9.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 311 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open