VDB
CVE-2019-19244
CVE-2019-19244
PUBLISHED
CVSS 9.300000190734863 CRITICAL
In Oracle MySQL existieren mehrere Schwachstellen in den Produkten MySQL Server, MySQL Workbench, MySQL Enterprise Monitor, MySQL Cluster, MySQL Client und MySQL Connectors. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verfügbarkeit, Vertraulichkeit und Integrität gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion und keine Authentisierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "High" für "Availability", "Confidentiality" und "Integrity" und bewirkt damit eine "hohe" Schadenshöhe.
EPSS 0.16% · 36.6th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.16%
36.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amazon | Amazon Linux 2 | |
| Avaya | Avaya Aura Experience Portal | |
| Avaya | Avaya Web License Manager | |
| SUSE | SUSE Linux | |
| Oracle | Oracle Linux | |
| Debian | Debian Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| Avaya | Avaya Aura Communication Manager | |
| Gentoo | Gentoo Linux | |
| Avaya | Avaya Aura Session Manager | |
| Avaya | Avaya Aura System Manager | |
| Ubuntu | Ubuntu Linux | |
| Oracle | Oracle MySQL | |
| Avaya | Avaya Aura Application Enablement Services |
Exploit Intelligence
- CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 (Debian-8ubuntu1) targets by driving Metasploit’s auxiliary/scanner/ssh/ssh_login module from Python via pwntools. (github-poc)
- CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 (Debian-8ubuntu1) targets by driving Metasploit’s auxiliary/scanner/ssh/ssh_login module from Python via pwntools. (github-poc)
- CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 (Debian-8ubuntu1) targets by driving Metasploit’s auxiliary/scanner/ssh/ssh_login module from Python via pwntools. (github-poc)
- CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 (Debian-8ubuntu1) targets by driving Metasploit’s auxiliary/scanner/ssh/ssh_login module from Python via pwntools. (github-poc)
- CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 (Debian-8ubuntu1) targets by driving Metasploit’s auxiliary/scanner/ssh/ssh_login module from Python via pwntools. (github-poc)
- CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 (Debian-8ubuntu1) targets by driving Metasploit’s auxiliary/scanner/ssh/ssh_login module from Python via pwntools. (github-poc)
- CVE-2025-38062.yara (github-yara)
- CVE-2025-38062.yara (github-yara)
- CVE-2025-38062.yara (github-yara)
- CVE-2025-38062.yara (github-yara)
…and 2 more exploits
Timeline
- Nov 25, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1614.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1614 advisory
- https://de.tenable.com/security/tns-2023-34 advisory
- https://de.tenable.com/security/tns-2023-23 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2023-1049.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1049 advisory
- https://alas.aws.amazon.com/AL2/ALAS-2023-2017.html advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL advisory
- https://access.redhat.com/errata/RHSA-2020:1810 advisory
- https://usn.ubuntu.com/4350-1/ advisory
- https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202006/msg00015.html advisory
- https://www.debian.org/security/2020/dsa-4703 advisory
- http://lists.suse.com/pipermail/sle-security-updates/2020-June/007007.html advisory
- http://lists.suse.com/pipermail/sle-security-updates/2020-June/007010.html advisory
- https://access.redhat.com/errata/RHSA-2020:3194 advisory
- https://access.redhat.com/errata/RHSA-2020:3518 advisory
- https://access.redhat.com/errata/RHSA-2020:3732 advisory
- https://access.redhat.com/errata/RHSA-2020:3755 advisory
- https://access.redhat.com/errata/RHSA-2020:3757 advisory
- https://access.redhat.com/errata/RHSA-2020:4026 advisory
…and 20 more