CVE-2019-2455

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-2455
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-2455.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-2455
Downstream
Related
Published
2019-01-16T19:30:32.720Z
Modified
2026-05-11T10:39:23.778835Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Database specific 
{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "introduced": "9.5"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "introduced": "7.3"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "16.04"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "18.04"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "18.10"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "8.6"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "8.6"
                }
            ]
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "8.6"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
5bfe1a3917ee1bddc7f2cde0c88961875148873c
Fixed
c0b4d74b52e7eec9b13af732193f7f8d7abe05de
Introduced
776555af021e917ce0d6235386b43ae59fdd5161
Fixed
2e5681a450627709512138a7d15b8ee035a29c6a
Introduced
c235de12ae3723b96944337bd89ad9cc87f21d8f
Fixed
1025363a35571d5a0ba7023287104d23c7aa61d5
Introduced
9664240c948a92c22ccda0e1f5a420eb776ddcb1
Fixed
bb045e7931c451b228ffc5bcdb1791a31eb0c852
Database specific 
{
    "cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "5.5.0"
        },
        {
            "fixed": "5.5.60"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.35"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.33"
        },
        {
            "introduced": "10.2.0"
        },
        {
            "fixed": "10.2.15"
        }
    ]
}

Affected versions

mariadb-10.*
mariadb-10.1.0
mariadb-10.1.10
mariadb-10.1.11
mariadb-10.1.12
mariadb-10.1.13
mariadb-10.1.14
mariadb-10.1.15
mariadb-10.1.16
mariadb-10.1.17
mariadb-10.1.18
mariadb-10.1.19
mariadb-10.1.2
mariadb-10.1.20
mariadb-10.1.21
mariadb-10.1.22
mariadb-10.1.23
mariadb-10.1.24
mariadb-10.1.25
mariadb-10.1.26
mariadb-10.1.27
mariadb-10.1.28
mariadb-10.1.29
mariadb-10.1.3
mariadb-10.1.30
mariadb-10.1.31
mariadb-10.1.32
mariadb-10.1.4
mariadb-10.1.5
mariadb-10.1.6
mariadb-10.1.7
mariadb-10.1.8
mariadb-10.1.9
mariadb-10.2.0
mariadb-10.2.1
mariadb-10.2.10
mariadb-10.2.11
mariadb-10.2.12
mariadb-10.2.13
mariadb-10.2.14
mariadb-10.2.2
mariadb-10.2.5

Database specific

vanir_signatures 
[
    {
        "id": "CVE-2019-2455-001e3e3f",
        "digest": {
            "function_hash": "231123461649866527768674208945148404874",
            "length": 343.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "alter_close_tables",
            "file": "sql/sql_partition.cc"
        }
    },
    {
        "id": "CVE-2019-2455-20248fe9",
        "digest": {
            "line_hashes": [
                "98623316213409793617979516151021505920",
                "150315841134420593989189694594199170377",
                "74220954711237228064095972947703663116",
                "154305823820827940419984535907620929865",
                "289479147918564409745345395754297148013",
                "308070364756342782418773016799218524736",
                "161552418692699585795449739961602993853",
                "85487136929008508869923944773295623492",
                "275388682514445710893178814805171875110",
                "178809449813359038226666686323941628709",
                "119949744805440180132144973758597620903",
                "185511711288508735090102321271938712463",
                "123105818852375417367735793496370373956",
                "39420389331847669276740398348823056549",
                "287683927221303284220379719752010569258",
                "151172545567567784782157395451800999432",
                "250515250401651252803798436142034922095",
                "140575188252870095998821594577623132738",
                "110147739517200557046208775879364660604",
                "199070321020541592119258315719848103148"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "file": "sql/sql_table.cc"
        }
    },
    {
        "id": "CVE-2019-2455-3598bd1a",
        "digest": {
            "line_hashes": [
                "248268375571264674713868657641409635309",
                "6756541203236256621229262233475091335",
                "288477169696598487647479116107449431283",
                "38338874926378347984271477663154559707",
                "156349013963660213813034118648638470744"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "file": "sql/sql_truncate.cc"
        }
    },
    {
        "id": "CVE-2019-2455-42c280ea",
        "digest": {
            "line_hashes": [
                "229668877858838427304667685812534150080",
                "71733128727302034242409639618612353324",
                "37303647763763701285109014035231688514",
                "240746509587050914626403293229669116841",
                "49187661201700155029618977023580532144"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "file": "sql/sql_trigger.cc"
        }
    },
    {
        "id": "CVE-2019-2455-499b0792",
        "digest": {
            "line_hashes": [
                "17803114805012787919203676656937789911",
                "157325619074821773502102572840272271369",
                "221252887105973422343886302901183412828",
                "228081691773921474700907818304973924665",
                "91687825008507014556510061127450564608"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "file": "sql/sql_admin.cc"
        }
    },
    {
        "id": "CVE-2019-2455-59b80242",
        "digest": {
            "function_hash": "165487064594079959249880768453359126541",
            "length": 1199.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "Truncate_statement::lock_table",
            "file": "sql/sql_truncate.cc"
        }
    },
    {
        "id": "CVE-2019-2455-62296843",
        "digest": {
            "line_hashes": [
                "733665378926861439603144577900355062",
                "180153685388187958939941610026288092376",
                "177249787923084198955959010311328384722",
                "331186826889024573165155955077766627707",
                "158274671428071215887037664373851655352",
                "18922941291621657244684992560598003226",
                "91644651387436945530500251138718183135",
                "35460528332965259364523146539808523513",
                "140927666597852594906838227922529625202"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "file": "sql/sql_partition.cc"
        }
    },
    {
        "id": "CVE-2019-2455-91fd7150",
        "digest": {
            "line_hashes": [
                "300406142040319082123527811638963238003",
                "199040959749600054709747629370655091601",
                "210529970254800422777482044429507215811",
                "144932245513799295406022564055704306037",
                "152800187986008570736973837847258222597"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "file": "sql/sql_base.h"
        }
    },
    {
        "id": "CVE-2019-2455-93a757d6",
        "digest": {
            "function_hash": "212848505831477462977019393544916051051",
            "length": 414.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "alter_partition_lock_handling",
            "file": "sql/sql_partition.cc"
        }
    },
    {
        "id": "CVE-2019-2455-9f23597f",
        "digest": {
            "function_hash": "254666496295307123912805047719032398588",
            "length": 848.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "close_all_tables_for_name",
            "file": "sql/sql_base.cc"
        }
    },
    {
        "id": "CVE-2019-2455-a13dc76b",
        "digest": {
            "function_hash": "307547925058980154024824836833721480709",
            "length": 2516.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "close_cached_tables",
            "file": "sql/sql_base.cc"
        }
    },
    {
        "id": "CVE-2019-2455-ab1f86a2",
        "digest": {
            "function_hash": "228120291487408690622172994366016631962",
            "length": 3133.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "mysql_create_or_drop_trigger",
            "file": "sql/sql_trigger.cc"
        }
    },
    {
        "id": "CVE-2019-2455-d7a5c234",
        "digest": {
            "function_hash": "42645391966692858134861268056434167785",
            "length": 3163.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "prepare_for_repair",
            "file": "sql/sql_admin.cc"
        }
    },
    {
        "id": "CVE-2019-2455-d85f9310",
        "digest": {
            "function_hash": "181946487599166129287471157698235931442",
            "length": 6584.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "mysql_rm_table_no_locks",
            "file": "sql/sql_table.cc"
        }
    },
    {
        "id": "CVE-2019-2455-f89e984c",
        "digest": {
            "line_hashes": [
                "19159825664530579448457382607599790985",
                "219641044277283784788035118736380523644",
                "58718184368927826411468608788623464271",
                "16531678164178269163773668188517326459",
                "306008785078093896767990199558236913553",
                "154321874791254813302235133160438739629",
                "47410171087885668586724438919720239358",
                "149576705647977492009294619323259281896",
                "120752287782577720187839525419105292409",
                "122648421302786558836472958225028865329",
                "74684100635662149771157483139565709120",
                "331500074359127820532341549682819740334",
                "145533971336799931076766909971236426736",
                "25993982317811094185796442155468024435",
                "241257698469144830092333010133194498943",
                "139296395445375594353912733722447648149",
                "338045279117053075942898738633579988776",
                "113930363466154712277001444097963236746",
                "178735082132599490753945704487387552470",
                "139590559789982818246547745039844995009",
                "216384293083677055841794255037151567255",
                "189504152669391006592752965488127884946",
                "60227878159953189981448899199680952782",
                "189466702747004673588972952417441532325",
                "1299079623696277756489701288817884925"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "file": "sql/sql_base.cc"
        }
    },
    {
        "id": "CVE-2019-2455-fce8cd3f",
        "digest": {
            "function_hash": "226020517142138691716213710526843560222",
            "length": 22039.0
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/mariadb/server/commit/c0b4d74b52e7eec9b13af732193f7f8d7abe05de",
        "target": {
            "function": "mysql_alter_table",
            "file": "sql/sql_table.cc"
        }
    }
]
source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-2455.json"
vanir_signatures_modified 
"2026-05-11T10:39:23Z"

Git / github.com/mysql/mysql-server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4789962c2f451b9bc7e9a1c29598bdea144edc47
Last affected
d2029238d6d9f648077664e4cdd611e231a6dc14
Last affected
270fd3411e3d671a73ed9725940a30080f59ce6d
Last affected
ea1efa9822d81044b726aab20c857d5e1b7e046a
Last affected
87307d4ddd88405117e3f1e51323836d57ab1f57
Last affected
dc86e412f18b36ce271f791026714e8caa0ec919
Introduced
270fd3411e3d671a73ed9725940a30080f59ce6d
Last affected
e4924f36486f971f8a04252e01c803457a2c72f7
Database specific 
{
    "cpe": [
        "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_desktop:8.0:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_server:8.0:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:enterprise_linux_workstation:8.0:*:*:*:*:*:*:*"
    ],
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "5.6.0"
        },
        {
            "last_affected": "5.6.42"
        },
        {
            "introduced": "5.7.0"
        },
        {
            "last_affected": "5.7.24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "last_affected": "8.1"
        },
        {
            "last_affected": "8.2"
        },
        {
            "last_affected": "8.4"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "last_affected": "8.0.13"
        }
    ]
}

Affected versions

mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-5.*
mysql-5.1.4
mysql-5.6.40
mysql-5.6.42
mysql-5.7.24
mysql-8.*
mysql-8.0.0
mysql-8.0.13
mysql-8.1.0
mysql-8.2.0
mysql-8.4.0
mysql-cluster-8.*
mysql-cluster-8.1.0
mysql-cluster-8.2.0
mysql-cluster-8.4.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-2455.json"