CVE-2019-5278

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of this vulnerability may cause the database to crash.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@huawei.com

Published

2019-12-13

Last modified

2024-08-04

Weaknesses

CWE-125

Affected products

• Campusinsight (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-gauss100-en