CVE catalog

CVE-2019-2974

Security update for mariadb

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.76% · Oct 25, 2026

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Alpinemariadb3.1010.3.20-r0fixed
Alpinemariadb3.1110.4.10-r0fixed
Alpinemariadb3.1210.4.10-r0fixed
Alpinemariadb3.1310.4.10-r0fixed
Alpinemariadb3.1410.4.10-r0fixed
Alpinemariadb3.1510.4.10-r0fixed
Alpinemariadb3.1610.4.10-r0fixed
Alpinemariadb3.1710.4.10-r0fixed
Alpinemariadb3.1810.4.10-r0fixed
Alpinemariadb3.1910.4.10-r0fixed
Alpinemariadb3.2010.4.10-r0fixed
Alpinemariadb3.2110.4.10-r0fixed
Alpinemariadb3.2210.4.10-r0fixed
Alpinemariadb3.2310.4.10-r0fixed
Alpinemariadb3.2410.4.10-r0fixed
Alpinemariadb3.810.2.29-r0fixed
Alpinemariadb3.910.3.20-r0fixed
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.55-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.57-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.58-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.59-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.60-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.61-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.62-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu4vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu5vulnerable
Ubuntumysql-5.716.045.7.11-0ubuntu6vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1vulnerable
Ubuntumysql-5.716.045.7.12-0ubuntu1.1vulnerable
Ubuntumysql-5.716.045.7.13-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.15-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.16-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.17-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.18-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.19-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.20-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.21-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.22-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.23-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.24-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.25-0ubuntu0.16.04.2vulnerable
Ubuntumysql-5.716.045.7.26-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.27-0ubuntu0.16.04.1vulnerable
Ubuntumysql-5.716.045.7.28-0ubuntu0.16.04.2fixed
Ubuntumariadb-10.016.0410.0.20-0ubuntu0.15.04.1vulnerable
Ubuntumariadb-10.016.0410.0.22-0ubuntu1vulnerable
Ubuntumariadb-10.016.0410.0.23-1vulnerable
Ubuntumariadb-10.016.0410.0.23-2vulnerable
Ubuntumariadb-10.016.0410.0.24-7vulnerable
Ubuntumariadb-10.016.0410.0.25-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.27-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.28-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.29-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.31-0ubuntu0.16.04.2vulnerable
Ubuntumariadb-10.016.0410.0.33-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.34-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.36-0ubuntu0.16.04.1vulnerable
Ubuntumariadb-10.016.0410.0.38-0ubuntu0.16.04.1vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu2vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.2vulnerable
Ubuntumariadb-10.118.0410.1.25-1vulnerable
Ubuntumariadb-10.118.041:10.1.29-6vulnerable
Ubuntumariadb-10.118.041:10.1.34-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.38-0ubuntu0.18.04.2vulnerable
Ubuntumariadb-10.118.041:10.1.40-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.41-0ubuntu0.18.04.1vulnerable
Ubuntumariadb-10.118.041:10.1.43-0ubuntu0.18.04.1fixed
Ubuntumysql-5.718.045.7.19-0ubuntu1vulnerable
Ubuntumysql-5.718.045.7.20-0ubuntu0.17.10.1vulnerable
Ubuntumysql-5.718.045.7.20-1ubuntu1vulnerable
Ubuntumysql-5.718.045.7.21-1ubuntu1vulnerable
Ubuntumysql-5.718.045.7.22-0ubuntu18.04.1vulnerable
Ubuntumysql-5.718.045.7.23-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.24-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.25-0ubuntu0.18.04.2vulnerable
Ubuntumysql-5.718.045.7.26-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.27-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.718.045.7.28-0ubuntu0.18.04.4fixed
Ubuntumysql-8.020.048.0.17-0ubuntu2vulnerable
Ubuntumysql-8.020.048.0.17-0ubuntu3vulnerable
Ubuntumysql-8.020.048.0.18-0ubuntu3fixed
Susemariadb-100linux enterprise desktop 12 sp410.0.40.2-2.12.2fixed
Susemariadb-100linux enterprise software development kit 12 sp410.0.40.2-2.12.2fixed
Susemariadb-100linux enterprise software development kit 12 sp510.0.40.2-2.12.2fixed
Susemariadb-100linux enterprise server 12 sp410.0.40.2-2.12.2fixed
Susemariadb-100linux enterprise server for sap applications 12 sp410.0.40.2-2.12.2fixed
Susemariadb-100linux enterprise server 12 sp510.0.40.2-2.12.2fixed
Susemariadb-100linux enterprise server for sap applications 12 sp510.0.40.2-2.12.2fixed
Susemariadb-100linux enterprise workstation extension 12 sp410.0.40.2-2.12.2fixed
Susemariadb-100linux enterprise workstation extension 12 sp510.0.40.2-2.12.2fixed
Susemariadbhpe helion openstack 810.0.40.2-29.35.1fixed
Susemariadbopenstack cloud 710.0.40.2-29.35.1fixed
Susemariadbopenstack cloud 810.0.40.2-29.35.1fixed
Susemariadbopenstack cloud crowbar 810.0.40.2-29.35.1fixed
Susemariadblinux enterprise server for sap applications 12 sp110.0.40.2-29.35.1fixed
Susemariadblinux enterprise server for sap applications 12 sp210.0.40.2-29.35.1fixed
Susemariadblinux enterprise server for sap applications 12 sp310.0.40.2-29.35.1fixed
Susemariadblinux enterprise server 12 sp1-ltss10.0.40.2-29.35.1fixed
Susemariadblinux enterprise server 12 sp2-ltss10.0.40.2-29.35.1fixed
Susemariadblinux enterprise server 12 sp2-bcl10.0.40.2-29.35.1fixed
Susemariadblinux enterprise server 12 sp3-ltss10.0.40.2-29.35.1fixed
Susemariadblinux enterprise server 12 sp3-bcl10.0.40.2-29.35.1fixed
Susemariadbenterprise storage 510.0.40.2-29.35.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Alpinemariadbapk3.1010.3.20-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1110.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1210.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1310.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1410.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1510.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1610.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1710.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1810.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.1910.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.2010.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.2110.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.2210.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.2310.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.2410.4.10-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.810.2.29-r0Not reportedALPINE-CVE-2019-2974Not reported
Alpinemariadbapk3.910.3.20-r0Not reportedALPINE-CVE-2019-2974Not reported
Ubuntumysql-5.7deb16.045.7.28-0ubuntu0.16.04.2Not reportedUBUNTU-CVE-2019-2974Not reported
Ubuntumariadb-10.1deb18.041:10.1.43-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2019-2974Not reported
Ubuntumysql-5.7deb18.045.7.28-0ubuntu0.18.04.4Not reportedUBUNTU-CVE-2019-2974Not reported
Ubuntumysql-8.0deb20.048.0.18-0ubuntu3Not reportedUBUNTU-CVE-2019-2974Not reported
Susemariadb-100rpmlinux enterprise desktop 12 sp410.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadb-100rpmlinux enterprise software development kit 12 sp410.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadb-100rpmlinux enterprise software development kit 12 sp510.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadb-100rpmlinux enterprise server 12 sp410.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadb-100rpmlinux enterprise server for sap applications 12 sp410.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadb-100rpmlinux enterprise server 12 sp510.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadb-100rpmlinux enterprise server for sap applications 12 sp510.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadb-100rpmlinux enterprise workstation extension 12 sp410.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadb-100rpmlinux enterprise workstation extension 12 sp510.0.40.2-2.12.2Not reportedSUSE-SU-2019:3370-1Not reported
Susemariadbrpmhpe helion openstack 810.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmopenstack cloud 710.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmopenstack cloud 810.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmopenstack cloud crowbar 810.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp110.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp210.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp310.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmlinux enterprise server 12 sp1-ltss10.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmlinux enterprise server 12 sp2-ltss10.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmlinux enterprise server 12 sp2-bcl10.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmlinux enterprise server 12 sp3-ltss10.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmlinux enterprise server 12 sp3-bcl10.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported
Susemariadbrpmenterprise storage 510.0.40.2-29.35.1Not reportedSUSE-SU-2020:0050-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References