CVE catalog

CVE-2019-2737

Security update for mariadb

[CVE catalog]

Severity
Medium · CVSS 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.95% · Oct 25, 2026

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Alpinemariadb3.1010.3.17-r0fixed
Alpinemariadb3.1110.4.7-r0fixed
Alpinemariadb3.1210.4.7-r0fixed
Alpinemariadb3.1310.4.7-r0fixed
Alpinemariadb3.1410.4.7-r0fixed
Alpinemariadb3.1510.4.7-r0fixed
Alpinemariadb3.1610.4.7-r0fixed
Alpinemariadb3.1710.4.7-r0fixed
Alpinemariadb3.1810.4.7-r0fixed
Alpinemariadb3.1910.4.7-r0fixed
Alpinemariadb3.2010.4.7-r0fixed
Alpinemariadb3.2110.4.7-r0fixed
Alpinemariadb3.2210.4.7-r0fixed
Alpinemariadb3.2310.4.7-r0fixed
Alpinemariadb3.2410.4.7-r0fixed
Alpinemariadb3.710.1.41-r0fixed
Alpinemariadb3.810.2.26-r0fixed
Alpinemariadb3.910.3.17-r0fixed
Ubuntumariadb-10.118.0410.1.25-1vulnerable
Ubuntumariadb-10.118.041:10.1.29-6vulnerable
Ubuntumariadb-10.118.041:10.1.34-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.2vulnerable
Ubuntumariadb-10.118.041:10.1.40-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.41-0ubuntu0.18.04.1fixed
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.18-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.19-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.20-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.21-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.22-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.23-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.24-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.25-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.26-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.27-0ubuntu0.16.04.1fixed
Ubuntumysql-5.718.045.7.19-0ubuntu1vulnerable
Ubuntumysql-5.718.045.7.20-0ubuntu0.17.10.1vulnerable
Ubuntumysql-5.718.045.7.20-1ubuntu1vulnerable
Ubuntumysql-5.718.045.7.21-1ubuntu1vulnerable
Ubuntumysql-5.718.045.7.22-0ubuntu18.04.1vulnerable
Ubuntumysql-5.718.045.7.23-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.24-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.25-0ubuntu0.18.04.2vulnerable
Ubuntumysql-5.718.045.7.26-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.27-0ubuntu0.18.04.1fixed
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.55-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.57-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.58-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.59-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.60-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.61-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.62-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.18-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.19-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.20-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.21-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.22-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.23-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.24-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.25-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.26-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.27-0ubuntu0.16.04.1fixed
Ubuntumariadb-10.016.0410.0.20-0ubuntu0.15.04.1vulnerable
Ubuntumariadb-10.016.0410.0.22-0ubuntu1vulnerable
Ubuntumariadb-10.016.0410.0.23-1vulnerable
Ubuntumariadb-10.016.0410.0.23-2vulnerable
Ubuntumariadb-10.016.0410.0.24-7vulnerable
Ubuntumariadb-10.016.0410.0.25-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.27-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.28-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.29-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.31-0ubuntu0.16.04.2vulnerable
Ubuntumariadb-10.016.0410.0.33-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.34-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.36-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.38-0ubuntu0.16.04.1vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu2vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.2vulnerable
Ubuntumariadb-10.118.0410.1.25-1vulnerable
Ubuntumariadb-10.118.041:10.1.29-6vulnerable
Ubuntumariadb-10.118.041:10.1.34-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.2vulnerable
Ubuntumariadb-10.118.041:10.1.40-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.41-0ubuntu0.18.04.1fixed
Ubuntumysql-5.718.045.7.19-0ubuntu1vulnerable
Ubuntumysql-5.718.045.7.20-0ubuntu0.17.10.1vulnerable
Ubuntumysql-5.718.045.7.20-1ubuntu1vulnerable
Ubuntumysql-5.718.045.7.21-1ubuntu1vulnerable
Ubuntumysql-5.718.045.7.22-0ubuntu18.04.1vulnerable
Ubuntumysql-5.718.045.7.23-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.24-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.25-0ubuntu0.18.04.2vulnerable
Ubuntumysql-5.718.045.7.26-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.27-0ubuntu0.18.04.1fixed
Susemariadbopenstack cloud 710.2.31-16.1fixed
Opensusemariadbleap 15.110.2.29-lp151.2.9.1fixed
Susemariadbopenstack cloud 910.2.29-3.22.1fixed
Susemariadbopenstack cloud crowbar 910.2.29-3.22.1fixed
Susemariadblinux enterprise desktop 12 sp410.2.29-3.22.1fixed
Susemariadblinux enterprise server 12 sp410.2.29-3.22.1fixed
Susemariadblinux enterprise server for sap applications 12 sp410.2.29-3.22.1fixed
Susemariadblinux enterprise server 12 sp510.2.29-3.22.1fixed
Susemariadblinux enterprise server for sap applications 12 sp510.2.29-3.22.1fixed
Susemariadblinux enterprise module for server applications 1510.2.29-3.23.1fixed
Susemariadblinux enterprise module for server applications 15 sp110.2.29-3.23.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Alpinemariadbapk3.1010.3.17-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1110.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1210.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1310.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1410.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1510.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1610.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1710.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1810.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.1910.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.2010.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.2110.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.2210.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.2310.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.2410.4.7-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.710.1.41-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.810.2.26-r0Not reportedALPINE-CVE-2019-2737Not reported
Alpinemariadbapk3.910.3.17-r0Not reportedALPINE-CVE-2019-2737Not reported
Ubuntumariadb-10.1deb18.041:10.1.41-0ubuntu0.18.04.1Not reportedUSN-4070-2Not reported
Ubuntumysql-5.7deb16.045.7.27-0ubuntu0.16.04.1Not reportedUSN-4070-1Not reported
Ubuntumysql-5.7deb18.045.7.27-0ubuntu0.18.04.1Not reportedUSN-4070-1Not reported
Ubuntumysql-5.7deb16.045.7.27-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2019-2737Not reported
Ubuntumariadb-10.1deb18.041:10.1.41-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2019-2737Not reported
Ubuntumysql-5.7deb18.045.7.27-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2019-2737Not reported
Susemariadbrpmopenstack cloud 710.2.31-16.1Not reportedSUSE-SU-2020:0831-1Not reported
Opensusemariadbrpmleap 15.110.2.29-lp151.2.9.1Not reportedOPENSUSE-SU-2019:2698-1Not reported
Susemariadbrpmopenstack cloud 910.2.29-3.22.1Not reportedSUSE-SU-2019:3369-1Not reported
Susemariadbrpmopenstack cloud crowbar 910.2.29-3.22.1Not reportedSUSE-SU-2019:3369-1Not reported
Susemariadbrpmlinux enterprise desktop 12 sp410.2.29-3.22.1Not reportedSUSE-SU-2019:3369-1Not reported
Susemariadbrpmlinux enterprise server 12 sp410.2.29-3.22.1Not reportedSUSE-SU-2019:3369-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp410.2.29-3.22.1Not reportedSUSE-SU-2019:3369-1Not reported
Susemariadbrpmlinux enterprise server 12 sp510.2.29-3.22.1Not reportedSUSE-SU-2019:3369-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp510.2.29-3.22.1Not reportedSUSE-SU-2019:3369-1Not reported
Susemariadbrpmlinux enterprise module for server applications 1510.2.29-3.23.1Not reportedSUSE-SU-2019:3306-1Not reported
Susemariadbrpmlinux enterprise module for server applications 15 sp110.2.29-3.23.1Not reportedSUSE-SU-2019:3306-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References