Every CVE Search/ Get API key

CVE-2019-2911

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema)....

2.7 LowFix available

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

2.14%Up 0.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 2.7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Record
CVE-2019-2911
CVSS 3.1
2.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Record
CVE-2019-2911
Updated
2026-11-02
EUVDEUVD-2019-12550 No score

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Record
EUVD-2019-12550
Updated
2026-11-03
GitHub AdvisoriesGHSA-c7h5-rrx8-xv9w 2.7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema)....

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Record
GHSA-c7h5-rrx8-xv9w
CVSS 3.1
2.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSV 2.7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Record
CVE-2019-2911
CVSS 3.1
2.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:3518 7.2

Red Hat Security Advisory: rh-mysql80-mysql security update

Record
RHSA-2020:3518
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVRHSA-2020:3732 7.2

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2020:3732
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3755 7.2

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2020:3755
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3757 7.2

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2020:3757
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2020:3732 7.2

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.21).

Security Fix(es):

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2020-14663, CVE-2020-14678, CVE-2020-14697, CVE-2020-2761, CVE-2020-2774, CVE-2020-2779, CVE-2020-2853, CVE-2020-14586, CVE-2020-14702)

  • mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2019-2914, CVE-2019-2957)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2938, CVE-2019-2963, CVE-2019-2968, CVE-2019-3018, CVE-2020-2577, CVE-2020-2589, CVE-2020-2760, CVE-2020-2762, CVE-2020-2814, CVE-2020-2893, CVE-2020-2895, CVE-2020-14568, CVE-2020-14623, CVE-2020-14633, CVE-2020-14634)

  • mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2946, CVE-2020-2925)

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2960, CVE-2020-2759, CVE-2020-2763, CVE-2020-14567)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2966, CVE-2019-2967, CVE-2019-2974, CVE-2019-2982, CVE-2019-2991, CVE-2019-2998, CVE-2020-2579, CVE-2020-2660, CVE-2020-2679, CVE-2020-2686, CVE-2020-2765, CVE-2020-2892, CVE-2020-2897, CVE-2020-2901, CVE-2020-2904, CVE-2020-2923, CVE-2020-2924, CVE-2020-2928, CVE-2020-14539, CVE-2020-14547, CVE-2020-14597, CVE-2020-14614, CVE-2020-14654, CVE-2020-14680, CVE-2020-14725)

  • mysql: Server: C API multiple unspecified vulnerabilities (CVE-2019-2993, CVE-2019-3011)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2997, CVE-2020-2580)

  • mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-3004, CVE-2020-2627, CVE-2020-2930, CVE-2020-14619)

  • mysql: Server: Connection unspecified vulnerability (CVE-2019-3009)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2020-2584, CVE-2020-14632)

  • mysql: Server: DML multiple unspecified vulnerabilities (CVE-2020-2588, CVE-2020-2780, CVE-2020-14540, CVE-2020-14575, CVE-2020-14620)

  • mysql: C API multiple unspecified vulnerabilities (CVE-2020-2752, CVE-2020-2922, CVE-2020-14550, CVE-2020-2570, CVE-2020-2573, CVE-2020-2574)

  • mysql: Server: Logging unspecified vulnerability (CVE-2020-2770)

  • mysql: Server: Memcached unspecified vulnerability (CVE-2020-2804)

  • mysql: Server: Stored Procedure unspecified vulnerability (CVE-2020-2812)

  • mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2020-2896, CVE-2020-14559, CVE-2020-2694)

  • mysql: Server: Charsets unspecified vulnerability (CVE-2020-2898)

  • mysql: Server: Connection Handling unspecified vulnerability (CVE-2020-2903)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2020-2921)

  • mysql: Server: Group Replication GCS unspecified vulnerability (CVE-2020-2926)

  • mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2020-14553)

  • mysql: Server: UDF unspecified vulnerability (CVE-2020-14576)

  • mysql: Server: JSON unspecified vulnerability (CVE-2020-14624)

  • mysql: Server: Security: Audit unspecified vulnerability (CVE-2020-14631)

  • mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2020-14641, CVE-2020-14643, CVE-2020-14651)

  • mysql: Server: Locking unspecified vulnerability (CVE-2020-14656)

  • mysql: Information Schema unspecified vulnerability (CVE-2019-2911)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2020:3732
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-2911 2.7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Record
UBUNTU-CVE-2019-2911
CVSS 3.1
2.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVALSA-2020:3732 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.21).

Security Fix(es):

  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2020-14663, CVE-2020-14678, CVE-2020-14697, CVE-2020-2761, CVE-2020-2774, CVE-2020-2779, CVE-2020-2853, CVE-2020-14586, CVE-2020-14702)

  • mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2019-2914, CVE-2019-2957)

  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2938, CVE-2019-2963, CVE-2019-2968, CVE-2019-3018, CVE-2020-2577, CVE-2020-2589, CVE-2020-2760, CVE-2020-2762, CVE-2020-2814, CVE-2020-2893, CVE-2020-2895, CVE-2020-14568, CVE-2020-14623, CVE-2020-14633, CVE-2020-14634)

  • mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2946, CVE-2020-2925)

  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2960, CVE-2020-2759, CVE-2020-2763, CVE-2020-14567)

  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2966, CVE-2019-2967, CVE-2019-2974, CVE-2019-2982, CVE-2019-2991, CVE-2019-2998, CVE-2020-2579, CVE-2020-2660, CVE-2020-2679, CVE-2020-2686, CVE-2020-2765, CVE-2020-2892, CVE-2020-2897, CVE-2020-2901, CVE-2020-2904, CVE-2020-2923, CVE-2020-2924, CVE-2020-2928, CVE-2020-14539, CVE-2020-14547, CVE-2020-14597, CVE-2020-14614, CVE-2020-14654, CVE-2020-14680, CVE-2020-14725)

  • mysql: Server: C API multiple unspecified vulnerabilities (CVE-2019-2993, CVE-2019-3011)

  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2997, CVE-2020-2580)

  • mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-3004, CVE-2020-2627, CVE-2020-2930, CVE-2020-14619)

  • mysql: Server: Connection unspecified vulnerability (CVE-2019-3009)

  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2020-2584, CVE-2020-14632)

  • mysql: Server: DML multiple unspecified vulnerabilities (CVE-2020-2588, CVE-2020-2780, CVE-2020-14540, CVE-2020-14575, CVE-2020-14620)

  • mysql: C API multiple unspecified vulnerabilities (CVE-2020-2752, CVE-2020-2922, CVE-2020-14550, CVE-2020-2570, CVE-2020-2573, CVE-2020-2574)

  • mysql: Server: Logging unspecified vulnerability (CVE-2020-2770)

  • mysql: Server: Memcached unspecified vulnerability (CVE-2020-2804)

  • mysql: Server: Stored Procedure unspecified vulnerability (CVE-2020-2812)

  • mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2020-2896, CVE-2020-14559, CVE-2020-2694)

  • mysql: Server: Charsets unspecified vulnerability (CVE-2020-2898)

  • mysql: Server: Connection Handling unspecified vulnerability (CVE-2020-2903)

  • mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2020-2921)

  • mysql: Server: Group Replication GCS unspecified vulnerability (CVE-2020-2926)

  • mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2020-14553)

  • mysql: Server: UDF unspecified vulnerability (CVE-2020-14576)

  • mysql: Server: JSON unspecified vulnerability (CVE-2020-14624)

  • mysql: Server: Security: Audit unspecified vulnerability (CVE-2020-14631)

  • mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2020-14641, CVE-2020-14643, CVE-2020-14651)

  • mysql: Server: Locking unspecified vulnerability (CVE-2020-14656)

  • mysql: Information Schema unspecified vulnerability (CVE-2019-2911)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2020:3732
Updated
2026-11-02
OSVUSN-4195-1 No score

mysql-5.7, mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.18 in Ubuntu 19.10. Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 19.04 have been updated to MySQL 5.7.28.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-28.html https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html https://www.oracle.com/security-alerts/cpuoct2019.html

Record
USN-4195-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mecab
AlmaLinux:8
From an advisory covering 109 CVEs
 before 0.996-1.module_el8.4.0+2532+b8928c02.9
0.996-1.module_el8.4.0+2532+b8928c02.9
mecab
AlmaLinux:8
From an advisory covering 109 CVEs
 before 0.996-1.module_el8.5.0+33+8bc5f36a.9
0.996-1.module_el8.5.0+33+8bc5f36a.9
mecab-ipadic
AlmaLinux:8
From an advisory covering 109 CVEs
 before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
mecab-ipadic
AlmaLinux:8
From an advisory covering 109 CVEs
 before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 109 CVEs
 before 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 109 CVEs
 before 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
rh-mysql80-mysql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-config
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-config-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
Show 72 moreShow less
Affected packages
PackageAffectedFixed
rh-mysql80-mysql-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-errmsg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-server
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-server-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-syspaths
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
rh-mysql80-mysql-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 109 CVEs
 before 0:8.0.21-1.el7
0:8.0.21-1.el7
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.2.0+7855+47abd494
0:8.0.21-1.module+el8.2.0+7855+47abd494
mecab
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-ipadic
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-common
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-devel
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-devel-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-errmsg
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-libs
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-libs-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-server
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-server-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-test
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mysql-test-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
0:8.0.21-1.module+el8.0.0+7853+3a2b0b25
mecab
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-debugsource
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.0.0+3898+e09bb8de.9
0:0.996-1.module+el8.0.0+3898+e09bb8de.9
mecab-ipadic
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mecab-ipadic-EUCJP
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
0:2.7.0.20070801-16.module+el8.0.0+3898+e09bb8de
mysql
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-common
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-debugsource
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-devel
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-devel-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-errmsg
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-libs
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-libs-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-server
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-server-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-test
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mysql-test-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.1.0+7854+62e1520f
0:8.0.21-1.module+el8.1.0+7854+62e1520f
mecab
Rocky Linux:8
From an advisory covering 109 CVEs
 before 0:0.996-1.module+el8.3.0+242+87d3366a.9
0:0.996-1.module+el8.3.0+242+87d3366a.9
mecab-ipadic
Rocky Linux:8
From an advisory covering 109 CVEs
 before 0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
0:2.7.0.20070801-16.module+el8.3.0+242+87d3366a
mysql
Rocky Linux:8
From an advisory covering 109 CVEs
 before 0:8.0.21-1.module+el8.3.0+242+87d3366a
0:8.0.21-1.module+el8.3.0+242+87d3366a
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
mysql-5.7
Ubuntu:16.04:LTS
 before 5.7.28-0ubuntu0.16.04.2, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 15 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.1
5.7.28-0ubuntu0.16.04.2
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mysql-5.7
Ubuntu:18.04:LTS
 before 5.7.28-0ubuntu0.18.04.4, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 5 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.1
5.7.28-0ubuntu0.18.04.4
mysql-8.0
Ubuntu:20.04:LTS
 before 8.0.18-0ubuntu3, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu3
8.0.18-0ubuntu3
mysql-5.7
Ubuntu:16.04:LTS
From an advisory covering 29 CVEs
 before 5.7.28-0ubuntu0.16.04.2, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 15 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.1
5.7.28-0ubuntu0.16.04.2
mysql-5.7
Ubuntu:18.04:LTS
From an advisory covering 29 CVEs
 before 5.7.28-0ubuntu0.18.04.4, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 5 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.1
5.7.28-0ubuntu0.18.04.4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2911 is a low vulnerability (CVSS 2.7) in Oracle Mysql, published October 16, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.14%, the 82nd percentile. Fixed in mysql-5.7 5.7.28-0ubuntu0.16.04.2.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 405 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open