CVE-2019-2436: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

Security readout for executives and security teams

CVE-2019-2436 affects Oracle MySQL Server 8.0.13 and earlier in the replication component. A highly privileged network attacker could crash or hang the database and make unauthorized changes to some accessible data. The business risk is service disruption and limited data integrity impact, not data theft based on the supplied CVSS vector. Exposure is limited to Oracle MySQL Server versions 8.0.13 and prior. Risk is highest where privileged MySQL or replication-capable accounts can reach the server over the network, especially for business-critical databases or vendor platforms bundling affected MySQL builds. Treat as a moderate priority, elevated for critical databases. The attacker must already have high privileges, but the impact includes complete database denial of service and some unauthorized data modification. Prioritize remediation where MySQL supports production systems or privileged database access is broadly reachable. Mitigation focus: Apply Oracle January 2019 CPU or relevant vendor-packaged updates.; Check Red Hat advisories if using Red Hat-distributed MySQL packages.; Review NetApp guidance if MySQL is embedded in affected NetApp products..

Prepared

Jun 7, 2026, 04:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.