CVE-2020-2768

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-2768
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2768.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-2768
Related
Published
2020-04-15T14:15:26.247Z
Modified
2026-04-10T04:26:38.048425Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H CVSS Calculator
Summary
[none]
Details

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.3.28 and prior, 7.4.27 and prior, 7.5.17 and prior, 7.6.13 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Cluster accessible data. CVSS 3.0 Base Score 6.3 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H).

References

Affected packages

Git / github.com/mysql/mysql-server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
560fa22885906cb9eb8689f0441c93dfbbd598be
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ba12387e40a6cf2adb3746e9dc5271f1772ce7ab
Introduced
ae41ce7c4ecff5e1e336ab768867370b8c94e02d
Last affected
7838f5ae99b806f784ee0921b363aa02b45261e3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a4ce7868667474fb5801897ad3f6b55380da70ac
Introduced
270fd3411e3d671a73ed9725940a30080f59ce6d
Last affected
ea7d2e2d16ac03afdd9cb72a972a95981107bf51
Database specific 
{
    "versions": [
        {
            "introduced": "7.3.0"
        },
        {
            "last_affected": "7.3.28"
        },
        {
            "introduced": "7.4.0"
        },
        {
            "last_affected": "7.4.27"
        },
        {
            "introduced": "7.5.0"
        },
        {
            "last_affected": "7.5.17"
        },
        {
            "introduced": "7.6.0"
        },
        {
            "last_affected": "7.6.13"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "last_affected": "8.0.19"
        }
    ]
}

Affected versions

mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-5.*
mysql-5.1.4
mysql-5.7-22-ndb-7.6.6
mysql-8.*
mysql-8.0.19
mysql-cluster-7.*
mysql-cluster-7.3.10
mysql-cluster-7.3.11
mysql-cluster-7.3.13
mysql-cluster-7.3.14
mysql-cluster-7.3.21
mysql-cluster-7.3.22
mysql-cluster-7.3.26
mysql-cluster-7.3.28
mysql-cluster-7.3.9
mysql-cluster-7.4.11
mysql-cluster-7.4.12
mysql-cluster-7.4.2
mysql-cluster-7.4.25
mysql-cluster-7.4.27
mysql-cluster-7.4.5
mysql-cluster-7.4.6
mysql-cluster-7.4.8
mysql-cluster-7.5.15
mysql-cluster-7.5.17
mysql-cluster-7.5.2
mysql-cluster-7.6.11
mysql-cluster-7.6.13
mysql-cluster-8.*
mysql-cluster-8.0.19

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2768.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "7.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "9.5"
            }
        ]
    }
]