Bug 699880

Summary:	<dev-db/percona-server-8.0.18.9: multiple vulnerabilities (CVE-2019-{2938,2974})
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial	CC:	ajak, maintainer-needed, mysql-bugs
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	~2 [noglsa]
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	699872

Description GLSAMaker/CVETool Bot gentoo-dev

2019-11-11 19:09:39 UTC

CVE-2019-2974 (https://nvd.nist.gov/vuln/detail/CVE-2019-2974):
  Vulnerability in the MySQL Server product of Oracle MySQL (component:
  Server: Optimizer). Supported versions that are affected are 5.6.45 and
  prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable
  vulnerability allows low privileged attacker with network access via
  multiple protocols to compromise MySQL Server. Successful attacks of this
  vulnerability can result in unauthorized ability to cause a hang or
  frequently repeatable crash (complete DOS) of MySQL Server.

CVE-2019-2938 (https://nvd.nist.gov/vuln/detail/CVE-2019-2938):
  Vulnerability in the MySQL Server product of Oracle MySQL (component:
  InnoDB). Supported versions that are affected are 5.7.27 and prior and
  8.0.17 and prior. Difficult to exploit vulnerability allows high privileged
  attacker with network access via multiple protocols to compromise MySQL
  Server. Successful attacks of this vulnerability can result in unauthorized
  ability to cause a hang or frequently repeatable crash (complete DOS) of
  MySQL Server.