CoreCVE
Back

MEDIUM

mysql: C API unspecified vulnerability (CPU Jan 2020)

Published Jan 15, 2020

Description

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (12)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner oracle
Published Jan 15, 2020
Updated Sep 30, 2024
Reserved Dec 10, 2019
Link CVE-2020-2574

CISA Vulnrichment

Updated Sep 30, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-2574

Red Hat

Severity Low
Public date Feb 5, 2020
Bugzilla 1798587
Link CVE-2020-2574

ENISA EUVD

Assigner oracle
Published Jan 15, 2020
Updated Sep 30, 2024
Link EUVD-2020-22367

GitHub

No data