CVE-2019-2634: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

Security readout for executives and security teams

CVE-2019-2634 is a denial-of-service vulnerability in Oracle MySQL Server replication. An attacker who can log on to the infrastructure where MySQL runs may be able to make MySQL hang or repeatedly crash. The cited record rates it CVSS 5.1, mainly because availability, not data theft, is affected. Exposure is most likely where MySQL Server 8.0.15 or earlier is installed and attackers could gain local logon to the host or supporting infrastructure. Internet-only exposure is not indicated by the CVSS vector or description. Treat this as a moderate availability risk. It is not described as remotely exploitable or actively exploited, but vulnerable database hosts supporting critical services should be updated through vendor guidance and access should be tightly controlled. Mitigation focus: Review Oracle April 2019 CPU guidance for the applicable MySQL update path.; Apply relevant vendor or downstream distributor updates, including Red Hat errata where applicable.; Restrict local logon access to MySQL hosts and supporting infrastructure..

Prepared

Jun 6, 2026, 21:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.